01 Record

CVE-2022-26354

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.39% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 32.9% of scored records. A rank, not a probability.
NVD base score: 3.2 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2022-03-16 14:02Z4 YR AGO

Last updated

2024-08-03 05:03Z2 YR AGO

Reserved

2022-03-02

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.1

Document digest

60f5b573ee7806de0654cdc6acba833a924f2207df26dbbf5ab518b8a5e91118

05 Affected products

VendorProductVersionsPlatforms

n/aqemu-kvmAffected QEMU versions <= 6.2.0—

06 References

gitlab.comhttps://gitlab.com/qemu-project/qemu/-/commit/8d1b247f3748ac4078524130c6d7ae42b6140aafx_refsource_MISC
lists.debian.org[debian-lts-announce] 20220404 [SECURITY] [DLA 2970-1] qemu security updatehttps://lists.debian.org/debian-lts-announce/2022/04/msg00002.htmlmailing-listx_refsource_MLIST
security.netapp.comhttps://security.netapp.com/advisory/ntap-20220425-0003/x_refsource_CONFIRM
www.debian.orgDSA-5133https://www.debian.org/security/2022/dsa-5133vendor-advisoryx_refsource_DEBIAN
security.gentoo.orgGLSA-202208-27https://security.gentoo.org/glsa/202208-27vendor-advisoryx_refsource_GENTOO
lists.debian.org[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security updatehttps://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlmailing-listx_refsource_MLIST

07 Fixed in

AlmaLinux 8

SLOF
Fixed in 20210217-1.module_el8.6.0+2880+7d9e3703
hivex
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
hivex-devel
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
libguestfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-appliance
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-bash-completion
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gfs2
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-inspect-icons
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-javadoc
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-ja
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-uk
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rescue
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rsync
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools-c
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-winsupport
Fixed in 8.6-1.module_el8.6.0+2880+7d9e3703
libguestfs-xfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libiscsi
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-devel
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-utils
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libnbd
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-bash-completion
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-devel
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libtpms
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libtpms-devel
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libvirt
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-client
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-config-network
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-config-nwfilter
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-interface
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-network
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-nodedev
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-nwfilter
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-qemu
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5

90 further packages in AlmaLinux 8 not shown (first 40 listed).

AlmaLinux 9

qemu-guest-agent
Fixed in 17:6.2.0-11.el9_0.3
qemu-img
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-audio-pa
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-block-curl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-block-rbd
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-common
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-core
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-ccw
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-gl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-pci
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-pci-gl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-vga
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-vga-gl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-usb-host
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-usb-redirect
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-docs
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-tools
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-ui-egl-headless
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-ui-opengl
Fixed in 17:6.2.0-11.el9_0.3
qemu-pr-helper
Fixed in 17:6.2.0-11.el9_0.3

CloudLinux 8

SLOF
Fixed in 20210217-1.module_el8.6.0+2880+7d9e3703
hivex
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
hivex-devel
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
libguestfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-appliance
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-bash-completion
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gfs2
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-inspect-icons
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-javadoc
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-ja
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-uk
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rescue
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rsync
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools-c
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-winsupport
Fixed in 8.6-1.module_el8.6.0+2880+7d9e3703
libguestfs-xfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libiscsi
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-devel
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-utils
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libnbd
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-bash-completion
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-devel
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libtpms
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libtpms-devel
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libvirt
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-client
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-config-network
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-config-nwfilter
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-interface
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-network
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-nodedev
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-nwfilter
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5
libvirt-daemon-driver-qemu
Fixed in 8.0.0-5.2.module_el8.6.0+3071+a07c0ea5

90 further packages in CloudLinux 8 not shown (first 40 listed).

Derived from AlmaLinux 8. Partial coverage: only packages taken from AlmaLinux 8 are listed.

CloudLinux 9

qemu-guest-agent
Fixed in 17:6.2.0-11.el9_0.3
qemu-img
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-audio-pa
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-block-curl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-block-rbd
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-common
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-core
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-ccw
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-gl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-pci
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-gpu-pci-gl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-vga
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-display-virtio-vga-gl
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-usb-host
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-device-usb-redirect
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-docs
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-tools
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-ui-egl-headless
Fixed in 17:6.2.0-11.el9_0.3
qemu-kvm-ui-opengl
Fixed in 17:6.2.0-11.el9_0.3
qemu-pr-helper
Fixed in 17:6.2.0-11.el9_0.3

Derived from AlmaLinux 9. Partial coverage: only packages taken from AlmaLinux 9 are listed.

Debian 12

qemu
Fixed in 1:7.0+dfsg-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

qemu
Fixed in 1:7.0+dfsg-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

qemu
Fixed in 1:7.0+dfsg-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 18.04 LTS

qemu
Fixed in 1:2.11+dfsg-1ubuntu7.40

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 20.04 LTS

qemu
Fixed in 1:4.2-3ubuntu6.23

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 22.04 LTS

qemu
Fixed in 1:6.2+dfsg-2ubuntu6.2

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.