← Database

CVE-2021-3930

MEDIUM CVSS: 6.5 Published: 2022-02-18 Modified: 2026-06-17

Description

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.

Affected Platforms

Redhat Codeready Linux Builder For Ibm Z SystemsRedhat Enterprise Linux Advanced Virtualization EusRedhat Enterprise LinuxRedhat Enterprise Linux For Power Little EndianRedhat OpenstackDebian Debian LinuxRedhat Codeready Linux BuilderRedhat Codeready Linux Builder For Power Little EndianQemu QemuRedhat Enterprise Linux For Ibm Z Systems

Weakness Type

CWE-193, CWE-193

References