CVE-2020-25743

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.

Score

CVSS 3.1 3.2 Low

Status

Modified - cve@mitre.org

Published

2020-10-06

Last modified

2024-08-04

Weaknesses

CWE-476

Affected products

• Qemu (Qemu)
• Enterprise Linux (Redhat)
• Openstack Platform (Redhat)

References

• http://www.openwall.com/lists/oss-security/2020/09/29/1
• https://bugzilla.redhat.com/show_bug.cgi?id=1881409
• https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05967.html
• https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Fide_nullptr1b