qemu-kvm: QEMU SR-IOV Enable Mask Vulnerability
Published Jul 25, 2025
5.4
MEDIUMCVSS 3.1
EPSS 0.24%
Description
hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
Affected products
-
- Version 10.0.0StatusaffectedConstraints<=10.0.3
- Version
No data.
Red Hat Enterprise Linux 10
qemu-kvm
Fix deferred
Red Hat Enterprise Linux 6
qemu-kvm
Not affected
Red Hat Enterprise Linux 7
qemu-kvm
Not affected
Red Hat Enterprise Linux 7
qemu-kvm-ma
Not affected
Red Hat Enterprise Linux 8
virt-devel:rhel/qemu-kvm
Not affected
Red Hat Enterprise Linux 8
virt:rhel/qemu-kvm
Not affected
Red Hat Enterprise Linux 8 Advanced Virtualization
virt-devel:8.2/qemu-kvm
Not affected
Red Hat Enterprise Linux 8 Advanced Virtualization
virt:8.2/qemu-kvm
Not affected
Red Hat Enterprise Linux 8 Advanced Virtualization
virt:av/qemu-kvm
Not affected
Red Hat Enterprise Linux 9
qemu-kvm
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | qemu-kvm | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 7 | qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 7 | qemu-kvm-ma | Not affected | n/a |
| Red Hat Enterprise Linux 8 | virt-devel:rhel/qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 8 | virt:rhel/qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt-devel:8.2/qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.2/qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:av/qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 9 | qemu-kvm | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References (6)
- https://access.redhat.com/security/cve/CVE-2025-54567 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2383340 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22565 Advisory
- https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/ Mailing ListPatch
- https://nvd.nist.gov/vuln/detail/CVE-2025-54567
- https://www.cve.org/CVERecord?id=CVE-2025-54567
Change history (0)
No recorded changes yet.