Every CVE Search/ Get API key

CVE-2022-0216

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of...

4.4 MediumFix available

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.43%Down 0.5 points since Aug 27, 2022
90%50%10%1%

What each source reports

NVD Score used 4.4

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Record
CVE-2022-0216
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Record
CVE-2022-0216
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2022-15418 No score

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Record
EUVD-2022-15418
Updated
2026-11-03
GitHub AdvisoriesGHSA-jr85-6g96-46pc 4.4

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of...

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Record
GHSA-jr85-6g96-46pc
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2022-0216 4.4

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Record
DEBIAN-CVE-2022-0216
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVOESA-2022-1907 6.5

qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.

	QEMU has two operating modes:

	Full system emulation. In this mode, QEMU emulates a full system (for example a PC),
	including one or several processors and various peripherals. It can be used to launch
	different Operating Systems without rebooting the PC or to debug system code.

	User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU.
	It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease
	cross-compilation and cross-debugging.
	You can refer to https://www.qemu.org for more infortmation.

Security Fix(es):

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.(CVE-2022-0216)

Record
OESA-2022-1907
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 12 moreShow less
OSVUBUNTU-CVE-2022-0216 4.4

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Record
UBUNTU-CVE-2022-0216
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV No score

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Record
CVE-2022-0216
Weakness
CWE-416
Updated
2026-11-02
OSVopenSUSE-SU-2024:12209-1 No score

qemu-7.0.0-53.1 on GA media

These are all security issues fixed in the qemu-7.0.0-53.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12209-1
Updated
2026-11-02
OSVSUSE-SU-2022:3594-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)
  • CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)
  • CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)
  • CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
  • CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
Record
SUSE-SU-2022:3594-1
Updated
2026-11-02
OSVSUSE-SU-2022:3660-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
  • CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
Record
SUSE-SU-2022:3660-1
Updated
2026-11-02
OSVSUSE-SU-2022:3768-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)
  • CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)
  • CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)
  • CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
  • CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
  • CVE-2021-3507: Fixed a heap buffer overflow in DMA read data transfers. (bsc#1185000)
  • CVE-2020-17380: Fixed a heap buffer overflow in sdhci_sdma_transfer_multi_blocks. (bsc#1175144)
Record
SUSE-SU-2022:3768-1
Updated
2026-11-02
OSVSUSE-SU-2022:3795-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
  • CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
Record
SUSE-SU-2022:3795-1
Updated
2026-11-02
OSVSUSE-SU-2023:0761-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • bsc#1172033 (CVE-2020-13253)

  • bsc#1180207 (CVE-2020-14394)

  • bsc#1172382 (CVE-2020-13754)

  • bsc#1198038 (CVE-2022-0216)

  • bsc#1193880 (CVE-2021-3929)

  • bsc#1197653 (CVE-2022-1050)

  • bsc#1205808 (CVE-2022-4144), bsc#1198712 (CVE-2022-26354)

  • bsc#1175144 (CVE-2020-17380, CVE-2020-25085, CVE-2021-3409), bsc#1185000 (CVE-2021-3507), bsc#1201367, CVE-2022-35414

  • About bsc#1175144, see also bsc#1182282 (CVE-2021-3409)

  • bsc#1198035, CVE-2021-4206

Record
SUSE-SU-2023:0761-1
Updated
2026-11-02
OSVSUSE-SU-2023:0840-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2022-4144: Fixed unsafe address translation can lead to out-of-bounds read in qxl_phys2virt (bsc#1205808).
  • CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc (bsc#1185000).
  • CVE-2020-14394: Fixed infinite loop in xhci_ring_chain_length() (bsc#1180207).
  • CVE-2022-0216: Fixed a use-after-free in lsi_do_msgout function in hw/scsi/lsi53c895a.c (bsc#1198038).
  • CVE-2022-1050: Fixed a use-after-free issue in pvrdma_exec_cmd() in pvrdma (bsc#1197653).
  • CVE-2021-3929: Fixed a DMA reentrancy issue leads to use-after-free in nvme (bsc#1193880).

The following non-security bugs were fixed:

  • Fix bsc#1202364.
Record
SUSE-SU-2023:0840-1
Updated
2026-11-02
OSVSUSE-SU-2023:2358-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2022-0216: Fixed a use-after-free in lsi_do_msgout() in hw/scsi/lsi53c895a.c (bsc#1198038).
  • CVE-2021-3929: Fixed use-after-free in nvme, caused by DMA reentrancy issue (bsc#1193880).
  • CVE-2021-4207: Fixed heap buffer overflow caused by double fetch in qxl_cursor() (bsc#1198037).
  • CVE-2021-4206: Fixed integer overflow in cursor_alloc() (bsc#1198035).
  • Amend .changes file: avoid declaring a still unfixed CVE, as fixed (bsc#1187529)
  • Fix the build breaks caused by binutils update (bsc#1192463, bsc#1193621)
Record
SUSE-SU-2023:2358-1
Updated
2026-11-02
OSVSUSE-SU-2024:1395-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2021-3750: Fixed DMA reentrancy issue that could lead to use-after-free (bsc#1190011)
  • CVE-2022-0216: Fixed use-after-free in lsi_do_msgout function in hw/scsi/lsi53c895a.c (bsc#1198038)
  • CVE-2023-0330: Fixed DMA reentrancy issue that could lead to stack overflow (bsc#1207205)
  • CVE-2023-3180: Fixed heap buffer overflow in virtio_crypto_sym_op_helper() (bsc#1213925)
  • CVE-2023-3354: Fixed improper I/O watch removal in VNC TLS handshake that could lead to remote unauthenticated denial of service (bsc#1212850)
Record
SUSE-SU-2024:1395-1
Updated
2026-11-02
OSVUSN-5772-1 No score

qemu vulnerabilities

It was discovered that QEMU incorrectly handled bulk transfers from SPICE clients. A remote attacker could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2021-3682)

It was discovered that QEMU did not properly manage memory when it transfers the USB packets. A malicious guest attacker could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2021-3750)

It was discovered that the QEMU SCSI device emulation incorrectly handled certain MODE SELECT commands. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2021-3930)

It was discovered that QEMU did not properly manage memory when it processing repeated messages to cancel the current SCSI request. A malicious privileged guest attacker could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2022-0216)

It was discovered that QEMU did not properly manage memory when it using Tulip device emulation. A malicious guest attacker could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 22.10. (CVE-2022-2962)

It was discovered that QEMU did not properly manage memory when processing ClientCutText messages. A attacker could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-3165)

Record
USN-5772-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Debian:12
 before 1:7.1+dfsg-1
1:7.1+dfsg-1
qemu
Debian:13
 before 1:7.1+dfsg-1
1:7.1+dfsg-1
qemu
Debian:14
 before 1:7.1+dfsg-1
1:7.1+dfsg-1
qemu
Debian:10
From an advisory covering 10 CVEs
 before 1:3.1+dfsg-8+deb10u10, plus listed versions
1:3.1+dfsg-81:3.1+dfsg-8+deb10u21:3.1+dfsg-8+deb10u31:3.1+dfsg-8+deb10u41:3.1+dfsg-8+deb10u5
Show 5 moreShow less
1:3.1+dfsg-8+deb10u61:3.1+dfsg-8+deb10u71:3.1+dfsg-8+deb10u81:3.1+dfsg-8+deb10u91:3.1+dfsg-8~deb10u1
1:3.1+dfsg-8+deb10u10
qemu
openEuler:20.03-LTS-SP1
 before 4.1.0-69.oe1
4.1.0-69.oe1
qemu
openEuler:20.03-LTS-SP3
 before 4.1.0-73.oe1
4.1.0-73.oe1
qemu
openEuler:22.03-LTS
 before 6.2.0-48.oe2203
6.2.0-48.oe2203
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
Show 55 moreShow less
Affected packages
PackageAffectedFixed
qemu
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Manager Proxy 4.1
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Manager Server 4.1
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Enterprise Storage 7
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
openSUSE:Leap 15.3
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 4.2.1-150200.69.1
4.2.1-150200.69.1
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.3
5.2.0-150300.118.3
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.3
5.2.0-150300.118.3
qemu
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.3
5.2.0-150300.118.3
qemu
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.3
5.2.0-150300.118.3
qemu
openSUSE:Leap Micro 5.2
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.3
5.2.0-150300.118.3
qemu
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.3
5.2.0-150300.118.3
qemu-linux-user
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.2
5.2.0-150300.118.2
qemu-testsuite
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 5.2.0-150300.118.5
5.2.0-150300.118.5
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 7 CVEs
 before 3.1.1.1-150100.80.43.2
3.1.1.1-150100.80.43.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 3.1.1.1-150100.80.43.2
3.1.1.1-150100.80.43.2
qemu
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 7 CVEs
 before 3.1.1.1-150100.80.43.2
3.1.1.1-150100.80.43.2
qemu
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 3.1.1.1-150100.80.43.2
3.1.1.1-150100.80.43.2
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 7 CVEs
 before 3.1.1.1-150100.80.43.2
3.1.1.1-150100.80.43.2
qemu
SUSE:Enterprise Storage 6
From an advisory covering 7 CVEs
 before 3.1.1.1-150100.80.43.2
3.1.1.1-150100.80.43.2
qemu
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 3.1.1.1-150100.80.43.2
3.1.1.1-150100.80.43.2
qemu
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 6.2.0-150400.37.8.2
6.2.0-150400.37.8.2
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 2 CVEs
 before 6.2.0-150400.37.8.2
6.2.0-150400.37.8.2
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 2 CVEs
 before 6.2.0-150400.37.8.2
6.2.0-150400.37.8.2
qemu
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 6.2.0-150400.37.8.2
6.2.0-150400.37.8.2
qemu-linux-user
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 6.2.0-150400.37.8.1
6.2.0-150400.37.8.1
qemu-testsuite
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 6.2.0-150400.37.8.4
6.2.0-150400.37.8.4
qemu
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 14 CVEs
 before 3.1.1.1-66.1
3.1.1.1-66.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 14 CVEs
 before 3.1.1.1-66.1
3.1.1.1-66.1
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Manager Proxy 4.2
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Manager Server 4.2
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Enterprise Storage 7.1
From an advisory covering 6 CVEs
 before 5.2.0-150300.121.2
5.2.0-150300.121.2
qemu
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 4 CVEs
 before 2.6.2-41.76.1
2.6.2-41.76.1
qemu
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 5 CVEs
 before 3.1.1.1-72.1
3.1.1.1-72.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 5 CVEs
 before 3.1.1.1-72.1
3.1.1.1-72.1
qemu
Ubuntu:Pro:14.04:LTS
 before 2.0.0+dfsg-2ubuntu1.47+esm2, plus listed versions
1.5.0+dfsg-3ubuntu51.5.0+dfsg-3ubuntu61.6.0+dfsg-2ubuntu11.6.0+dfsg-2ubuntu21.6.0+dfsg-2ubuntu3
Show 45 moreShow less
1.6.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu11.7.0+dfsg-2ubuntu21.7.0+dfsg-2ubuntu31.7.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu51.7.0+dfsg-2ubuntu71.7.0+dfsg-2ubuntu81.7.0+dfsg-2ubuntu91.7.0+dfsg-3ubuntu1~ppa11.7.0+dfsg-3ubuntu11.7.0+dfsg-3ubuntu21.7.0+dfsg-3ubuntu31.7.0+dfsg-3ubuntu41.7.0+dfsg-3ubuntu51.7.0+dfsg-3ubuntu61.7.0+dfsg-3ubuntu72.0.0~rc1+dfsg-0ubuntu12.0.0~rc1+dfsg-0ubuntu22.0.0~rc1+dfsg-0ubuntu32.0.0~rc1+dfsg-0ubuntu3.12.0.0+dfsg-2ubuntu12.0.0+dfsg-2ubuntu1.12.0.0+dfsg-2ubuntu1.22.0.0+dfsg-2ubuntu1.32.0.0+dfsg-2ubuntu1.52.0.0+dfsg-2ubuntu1.62.0.0+dfsg-2ubuntu1.72.0.0+dfsg-2ubuntu1.82.0.0+dfsg-2ubuntu1.92.0.0+dfsg-2ubuntu1.102.0.0+dfsg-2ubuntu1.112.0.0+dfsg-2ubuntu1.132.0.0+dfsg-2ubuntu1.142.0.0+dfsg-2ubuntu1.152.0.0+dfsg-2ubuntu1.162.0.0+dfsg-2ubuntu1.172.0.0+dfsg-2ubuntu1.182.0.0+dfsg-2ubuntu1.192.0.0+dfsg-2ubuntu1.202.0.0+dfsg-2ubuntu1.212.0.0+dfsg-2ubuntu1.222.0.0+dfsg-2ubuntu1.242.0.0+dfsg-2ubuntu1.252.0.0+dfsg-2ubuntu1.26
2.0.0+dfsg-2ubuntu1.47+esm2
qemu
Ubuntu:Pro:16.04:LTS
 before 1:2.5+dfsg-5ubuntu10.51+esm1, plus listed versions
1:2.3+dfsg-5ubuntu91:2.3+dfsg-5ubuntu101:2.4+dfsg-4ubuntu11:2.4+dfsg-4ubuntu21:2.4+dfsg-4ubuntu3
Show 45 moreShow less
1:2.4+dfsg-5ubuntu31:2.5+dfsg-1ubuntu21:2.5+dfsg-1ubuntu31:2.5+dfsg-1ubuntu41:2.5+dfsg-1ubuntu51:2.5+dfsg-5ubuntu11:2.5+dfsg-5ubuntu21:2.5+dfsg-5ubuntu41:2.5+dfsg-5ubuntu61:2.5+dfsg-5ubuntu71:2.5+dfsg-5ubuntu101:2.5+dfsg-5ubuntu10.11:2.5+dfsg-5ubuntu10.21:2.5+dfsg-5ubuntu10.31:2.5+dfsg-5ubuntu10.41:2.5+dfsg-5ubuntu10.51:2.5+dfsg-5ubuntu10.61:2.5+dfsg-5ubuntu10.71:2.5+dfsg-5ubuntu10.81:2.5+dfsg-5ubuntu10.91:2.5+dfsg-5ubuntu10.101:2.5+dfsg-5ubuntu10.111:2.5+dfsg-5ubuntu10.131:2.5+dfsg-5ubuntu10.141:2.5+dfsg-5ubuntu10.151:2.5+dfsg-5ubuntu10.161:2.5+dfsg-5ubuntu10.201:2.5+dfsg-5ubuntu10.211:2.5+dfsg-5ubuntu10.221:2.5+dfsg-5ubuntu10.241:2.5+dfsg-5ubuntu10.251:2.5+dfsg-5ubuntu10.261:2.5+dfsg-5ubuntu10.281:2.5+dfsg-5ubuntu10.291:2.5+dfsg-5ubuntu10.301:2.5+dfsg-5ubuntu10.311:2.5+dfsg-5ubuntu10.321:2.5+dfsg-5ubuntu10.331:2.5+dfsg-5ubuntu10.341:2.5+dfsg-5ubuntu10.351:2.5+dfsg-5ubuntu10.361:2.5+dfsg-5ubuntu10.371:2.5+dfsg-5ubuntu10.381:2.5+dfsg-5ubuntu10.391:2.5+dfsg-5ubuntu10.40
1:2.5+dfsg-5ubuntu10.51+esm1
qemu
Ubuntu:18.04:LTS
 before 1:2.11+dfsg-1ubuntu7.41, plus listed versions
1:2.10+dfsg-0ubuntu31:2.10+dfsg-0ubuntu41:2.10+dfsg-0ubuntu51:2.11+dfsg-1ubuntu11:2.11+dfsg-1ubuntu2
Show 40 moreShow less
1:2.11+dfsg-1ubuntu41:2.11+dfsg-1ubuntu51:2.11+dfsg-1ubuntu61:2.11+dfsg-1ubuntu71:2.11+dfsg-1ubuntu7.11:2.11+dfsg-1ubuntu7.21:2.11+dfsg-1ubuntu7.31:2.11+dfsg-1ubuntu7.41:2.11+dfsg-1ubuntu7.51:2.11+dfsg-1ubuntu7.61:2.11+dfsg-1ubuntu7.71:2.11+dfsg-1ubuntu7.81:2.11+dfsg-1ubuntu7.91:2.11+dfsg-1ubuntu7.101:2.11+dfsg-1ubuntu7.121:2.11+dfsg-1ubuntu7.131:2.11+dfsg-1ubuntu7.141:2.11+dfsg-1ubuntu7.151:2.11+dfsg-1ubuntu7.171:2.11+dfsg-1ubuntu7.181:2.11+dfsg-1ubuntu7.191:2.11+dfsg-1ubuntu7.201:2.11+dfsg-1ubuntu7.211:2.11+dfsg-1ubuntu7.221:2.11+dfsg-1ubuntu7.231:2.11+dfsg-1ubuntu7.251:2.11+dfsg-1ubuntu7.261:2.11+dfsg-1ubuntu7.271:2.11+dfsg-1ubuntu7.281:2.11+dfsg-1ubuntu7.291:2.11+dfsg-1ubuntu7.311:2.11+dfsg-1ubuntu7.321:2.11+dfsg-1ubuntu7.331:2.11+dfsg-1ubuntu7.341:2.11+dfsg-1ubuntu7.351:2.11+dfsg-1ubuntu7.361:2.11+dfsg-1ubuntu7.371:2.11+dfsg-1ubuntu7.381:2.11+dfsg-1ubuntu7.391:2.11+dfsg-1ubuntu7.40
1:2.11+dfsg-1ubuntu7.41
qemu
Ubuntu:20.04:LTS
 before 1:4.2-3ubuntu6.24, plus listed versions
1:4.0+dfsg-0ubuntu91:4.0+dfsg-0ubuntu101:4.2-1ubuntu11:4.2-1ubuntu21:4.2-3ubuntu1
Show 25 moreShow less
1:4.2-3ubuntu21:4.2-3ubuntu31:4.2-3ubuntu41:4.2-3ubuntu51:4.2-3ubuntu61:4.2-3ubuntu6.11:4.2-3ubuntu6.21:4.2-3ubuntu6.31:4.2-3ubuntu6.41:4.2-3ubuntu6.51:4.2-3ubuntu6.61:4.2-3ubuntu6.71:4.2-3ubuntu6.81:4.2-3ubuntu6.91:4.2-3ubuntu6.101:4.2-3ubuntu6.111:4.2-3ubuntu6.121:4.2-3ubuntu6.141:4.2-3ubuntu6.151:4.2-3ubuntu6.161:4.2-3ubuntu6.171:4.2-3ubuntu6.181:4.2-3ubuntu6.191:4.2-3ubuntu6.211:4.2-3ubuntu6.23
1:4.2-3ubuntu6.24
qemu
Ubuntu:22.04:LTS
 before 1:6.2+dfsg-2ubuntu6.6, plus listed versions
1:6.0+dfsg-2expubuntu11:6.0+dfsg-2expubuntu21:6.0+dfsg-2expubuntu41:6.2+dfsg-2ubuntu51:6.2+dfsg-2ubuntu6
Show 5 moreShow less
1:6.2+dfsg-2ubuntu6.11:6.2+dfsg-2ubuntu6.21:6.2+dfsg-2ubuntu6.31:6.2+dfsg-2ubuntu6.41:6.2+dfsg-2ubuntu6.5
1:6.2+dfsg-2ubuntu6.6
qemu
Ubuntu:Pro:14.04:LTS
From an advisory covering 5 CVEs
 before 2.0.0+dfsg-2ubuntu1.47+esm2, plus listed versions
1.5.0+dfsg-3ubuntu51.5.0+dfsg-3ubuntu61.6.0+dfsg-2ubuntu11.6.0+dfsg-2ubuntu21.6.0+dfsg-2ubuntu3
Show 45 moreShow less
1.6.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu11.7.0+dfsg-2ubuntu21.7.0+dfsg-2ubuntu31.7.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu51.7.0+dfsg-2ubuntu71.7.0+dfsg-2ubuntu81.7.0+dfsg-2ubuntu91.7.0+dfsg-3ubuntu1~ppa11.7.0+dfsg-3ubuntu11.7.0+dfsg-3ubuntu21.7.0+dfsg-3ubuntu31.7.0+dfsg-3ubuntu41.7.0+dfsg-3ubuntu51.7.0+dfsg-3ubuntu61.7.0+dfsg-3ubuntu72.0.0~rc1+dfsg-0ubuntu12.0.0~rc1+dfsg-0ubuntu22.0.0~rc1+dfsg-0ubuntu32.0.0~rc1+dfsg-0ubuntu3.12.0.0+dfsg-2ubuntu12.0.0+dfsg-2ubuntu1.12.0.0+dfsg-2ubuntu1.22.0.0+dfsg-2ubuntu1.32.0.0+dfsg-2ubuntu1.52.0.0+dfsg-2ubuntu1.62.0.0+dfsg-2ubuntu1.72.0.0+dfsg-2ubuntu1.82.0.0+dfsg-2ubuntu1.92.0.0+dfsg-2ubuntu1.102.0.0+dfsg-2ubuntu1.112.0.0+dfsg-2ubuntu1.132.0.0+dfsg-2ubuntu1.142.0.0+dfsg-2ubuntu1.152.0.0+dfsg-2ubuntu1.162.0.0+dfsg-2ubuntu1.172.0.0+dfsg-2ubuntu1.182.0.0+dfsg-2ubuntu1.192.0.0+dfsg-2ubuntu1.202.0.0+dfsg-2ubuntu1.212.0.0+dfsg-2ubuntu1.222.0.0+dfsg-2ubuntu1.242.0.0+dfsg-2ubuntu1.252.0.0+dfsg-2ubuntu1.26
2.0.0+dfsg-2ubuntu1.47+esm2
qemu
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 1:2.5+dfsg-5ubuntu10.51+esm1, plus listed versions
1:2.3+dfsg-5ubuntu91:2.3+dfsg-5ubuntu101:2.4+dfsg-4ubuntu11:2.4+dfsg-4ubuntu21:2.4+dfsg-4ubuntu3
Show 45 moreShow less
1:2.4+dfsg-5ubuntu31:2.5+dfsg-1ubuntu21:2.5+dfsg-1ubuntu31:2.5+dfsg-1ubuntu41:2.5+dfsg-1ubuntu51:2.5+dfsg-5ubuntu11:2.5+dfsg-5ubuntu21:2.5+dfsg-5ubuntu41:2.5+dfsg-5ubuntu61:2.5+dfsg-5ubuntu71:2.5+dfsg-5ubuntu101:2.5+dfsg-5ubuntu10.11:2.5+dfsg-5ubuntu10.21:2.5+dfsg-5ubuntu10.31:2.5+dfsg-5ubuntu10.41:2.5+dfsg-5ubuntu10.51:2.5+dfsg-5ubuntu10.61:2.5+dfsg-5ubuntu10.71:2.5+dfsg-5ubuntu10.81:2.5+dfsg-5ubuntu10.91:2.5+dfsg-5ubuntu10.101:2.5+dfsg-5ubuntu10.111:2.5+dfsg-5ubuntu10.131:2.5+dfsg-5ubuntu10.141:2.5+dfsg-5ubuntu10.151:2.5+dfsg-5ubuntu10.161:2.5+dfsg-5ubuntu10.201:2.5+dfsg-5ubuntu10.211:2.5+dfsg-5ubuntu10.221:2.5+dfsg-5ubuntu10.241:2.5+dfsg-5ubuntu10.251:2.5+dfsg-5ubuntu10.261:2.5+dfsg-5ubuntu10.281:2.5+dfsg-5ubuntu10.291:2.5+dfsg-5ubuntu10.301:2.5+dfsg-5ubuntu10.311:2.5+dfsg-5ubuntu10.321:2.5+dfsg-5ubuntu10.331:2.5+dfsg-5ubuntu10.341:2.5+dfsg-5ubuntu10.351:2.5+dfsg-5ubuntu10.361:2.5+dfsg-5ubuntu10.371:2.5+dfsg-5ubuntu10.381:2.5+dfsg-5ubuntu10.391:2.5+dfsg-5ubuntu10.40
1:2.5+dfsg-5ubuntu10.51+esm1
qemu
Ubuntu:18.04:LTS
From an advisory covering 5 CVEs
 before 1:2.11+dfsg-1ubuntu7.41, plus listed versions
1:2.10+dfsg-0ubuntu31:2.10+dfsg-0ubuntu41:2.10+dfsg-0ubuntu51:2.11+dfsg-1ubuntu11:2.11+dfsg-1ubuntu2
Show 40 moreShow less
1:2.11+dfsg-1ubuntu41:2.11+dfsg-1ubuntu51:2.11+dfsg-1ubuntu61:2.11+dfsg-1ubuntu71:2.11+dfsg-1ubuntu7.11:2.11+dfsg-1ubuntu7.21:2.11+dfsg-1ubuntu7.31:2.11+dfsg-1ubuntu7.41:2.11+dfsg-1ubuntu7.51:2.11+dfsg-1ubuntu7.61:2.11+dfsg-1ubuntu7.71:2.11+dfsg-1ubuntu7.81:2.11+dfsg-1ubuntu7.91:2.11+dfsg-1ubuntu7.101:2.11+dfsg-1ubuntu7.121:2.11+dfsg-1ubuntu7.131:2.11+dfsg-1ubuntu7.141:2.11+dfsg-1ubuntu7.151:2.11+dfsg-1ubuntu7.171:2.11+dfsg-1ubuntu7.181:2.11+dfsg-1ubuntu7.191:2.11+dfsg-1ubuntu7.201:2.11+dfsg-1ubuntu7.211:2.11+dfsg-1ubuntu7.221:2.11+dfsg-1ubuntu7.231:2.11+dfsg-1ubuntu7.251:2.11+dfsg-1ubuntu7.261:2.11+dfsg-1ubuntu7.271:2.11+dfsg-1ubuntu7.281:2.11+dfsg-1ubuntu7.291:2.11+dfsg-1ubuntu7.311:2.11+dfsg-1ubuntu7.321:2.11+dfsg-1ubuntu7.331:2.11+dfsg-1ubuntu7.341:2.11+dfsg-1ubuntu7.351:2.11+dfsg-1ubuntu7.361:2.11+dfsg-1ubuntu7.371:2.11+dfsg-1ubuntu7.381:2.11+dfsg-1ubuntu7.391:2.11+dfsg-1ubuntu7.40
1:2.11+dfsg-1ubuntu7.41
qemu
Ubuntu:20.04:LTS
From an advisory covering 5 CVEs
 before 1:4.2-3ubuntu6.24, plus listed versions
1:4.0+dfsg-0ubuntu91:4.0+dfsg-0ubuntu101:4.2-1ubuntu11:4.2-1ubuntu21:4.2-3ubuntu1
Show 25 moreShow less
1:4.2-3ubuntu21:4.2-3ubuntu31:4.2-3ubuntu41:4.2-3ubuntu51:4.2-3ubuntu61:4.2-3ubuntu6.11:4.2-3ubuntu6.21:4.2-3ubuntu6.31:4.2-3ubuntu6.41:4.2-3ubuntu6.51:4.2-3ubuntu6.61:4.2-3ubuntu6.71:4.2-3ubuntu6.81:4.2-3ubuntu6.91:4.2-3ubuntu6.101:4.2-3ubuntu6.111:4.2-3ubuntu6.121:4.2-3ubuntu6.141:4.2-3ubuntu6.151:4.2-3ubuntu6.161:4.2-3ubuntu6.171:4.2-3ubuntu6.181:4.2-3ubuntu6.191:4.2-3ubuntu6.211:4.2-3ubuntu6.23
1:4.2-3ubuntu6.24
qemu
Ubuntu:22.04:LTS
From an advisory covering 5 CVEs
 before 1:6.2+dfsg-2ubuntu6.6, plus listed versions
1:6.0+dfsg-2expubuntu11:6.0+dfsg-2expubuntu21:6.0+dfsg-2expubuntu41:6.2+dfsg-2ubuntu51:6.2+dfsg-2ubuntu6
Show 5 moreShow less
1:6.2+dfsg-2ubuntu6.11:6.2+dfsg-2ubuntu6.21:6.2+dfsg-2ubuntu6.31:6.2+dfsg-2ubuntu6.41:6.2+dfsg-2ubuntu6.5
1:6.2+dfsg-2ubuntu6.6
qemu
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 7.0.0-53.1
7.0.0-53.1

History

History
RecordedChangedSources
affected, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-0216 is a medium vulnerability (CVSS 4.4) in Qemu, published August 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in qemu 1:7.1+dfsg-1.

References

Show 66 moreShow less
This page doesn't list everything

Left out here: 62 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open