Forum: >>> Magnum BBS <<<

Bug#1109989: qemu: CVE-2025-54566 CVE-2025-54567

From Salvatore Bonaccorso@21:1/5 to All on Sun Jul 27 21:30:02 2025

Source: qemu
Version: 1:10.0.2+ds-2
Severity: important
Tags: security upstream
Forwarded: https://lore.kernel.org/qemu-devel/[email protected]/
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>

Hi,

The following vulnerabilities were published for qemu.

CVE-2025-54566[0]:
| hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state
| inconsistency, a related issue to CVE-2024-26327.

CVE-2025-54567[1]:
| hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable
| bit write mask, a related issue to CVE-2024-26327.

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-54566
https://www.cve.org/CVERecord?id=CVE-2025-54566
[1] https://security-tracker.debian.org/tracker/CVE-2025-54567
https://www.cve.org/CVERecord?id=CVE-2025-54567
[2] https://lore.kernel.org/qemu-devel/[email protected]/

Regards,
Salvatore

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sysop:	Keyop
Location:	Huddersfield, West Yorkshire, UK
Users:	796
Nodes:	16 (0 / 16)
Uptime:	166:11:25
Calls:	13,194
Calls today:	1
Files:	15,487
Messages:	6,579,186