Every CVE Search/ Get API key

CVE-2023-2680

Dma reentrancy issue (incomplete fix for cve-2021-3750)

7.5 HighFix available

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.24%Up 0.2 points since Sep 14, 2023
90%50%10%1%

What each source reports

CVE List Score used 7.5

Dma reentrancy issue (incomplete fix for cve-2021-3750)

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

Record
CVE-2023-2680
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2023-34144 7.5

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

Record
EUVD-2023-34144
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-69cm-qhp7-ch23 7.5

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm...

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

Record
GHSA-69cm-qhp7-ch23
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.5

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

Record
CVE-2023-2680
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 7.5

Dma reentrancy issue (incomplete fix for cve-2021-3750)

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

Record
CVE-2023-2680
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVRHSA-2023:6368 7.5

Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Record
RHSA-2023:6368
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:6368 No score

Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

The following packages have been upgraded to a later upstream version: qemu-kvm (8.0.0). (BZ#2180898)

Security Fix(es):

  • QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) (CVE-2023-2680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:6368
Updated
2026-11-02
OSVCLSA-2025-1760021660 No score

qemu-kvm: Fix of 3 CVEs

  • CVE-2021-3750: fix for DMA reentrancy use-after-free
  • CVE-2023-2680: final fix for CVE-2021-3750
  • CVE-2023-0330: fix reentrancy in LSI53c895a SCSI controller
Record
CLSA-2025-1760021660
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu-guest-agent
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-img
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-audio-pa
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-block-blkio
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-block-curl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-block-rbd
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-core
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-device-display-virtio-gpu
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
Show 72 moreShow less
Affected packages
PackageAffectedFixed
qemu-kvm-device-display-virtio-gpu-ccw
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-device-display-virtio-gpu-pci
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-device-display-virtio-vga
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-device-usb-host
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-device-usb-redirect
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-docs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-tools
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-ui-egl-headless
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-kvm-ui-opengl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-pr-helper
AlmaLinux:9
From an advisory covering 2 CVEs
 before 17:8.0.0-16.el9_3.alma.1
17:8.0.0-16.el9_3.alma.1
qemu-guest-agent
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-img
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-audio-pa
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-block-curl
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-block-rbd
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-common
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-core
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-device-display-virtio-gpu
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-device-display-virtio-gpu-pci
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-device-display-virtio-vga
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-device-usb-host
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-device-usb-redirect
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-docs
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-tests
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-ui-egl-headless
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-kvm-ui-opengl
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-pr-helper
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 17:7.2.0-14.el9.5.alma.1.tuxcare.els1
17:7.2.0-14.el9.5.alma.1.tuxcare.els1
qemu-guest-agent
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-guest-agent-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-img
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-img-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-audio-dbus-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-audio-pa
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-audio-pa-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-block-blkio
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-block-blkio-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-block-curl
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-block-curl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-block-rbd
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-block-rbd-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-common
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-common-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-core
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-core-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-debugsource
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-gpu
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-gpu-ccw
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-gpu-ccw-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-gpu-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-gpu-pci
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-gpu-pci-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-vga
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-display-virtio-vga-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-usb-host
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-usb-host-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-usb-redirect
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-device-usb-redirect-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-docs
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-tools
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-ui-dbus-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-ui-egl-headless
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-ui-egl-headless-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-ui-opengl
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-kvm-ui-opengl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-pr-helper
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3
qemu-pr-helper-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 17:8.0.0-16.el9_3
17:8.0.0-16.el9_3

History

History
RecordedChangedSources
affected, facts
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-2680 is a high vulnerability (CVSS 7.5) in Qemu, published September 13, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in qemu-guest-agent 17:8.0.0-16.el9_3.

References

Show 57 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open