CVE-2021-20221

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 4.2.0

Description The issue is related to an out-of-bounds heap buffer access in the ARM Generic Interrupt Controller emulator of QEMU. This occurs because the interrupt ID written to the controller memory area is not masked to be 4 bits wide, potentially leading to issues when updating controller state fields and their subsequent processing. A privileged guest user may exploit this to crash the QEMU process on the host, resulting in a denial-of-service scenario.

Recommendations For QEMU versions up to and including 4.2.0, consider updating to a version where this issue is fixed, as the current version may allow a privileged guest user to crash the QEMU process, leading to a denial-of-service scenario. At the moment, there is no information about a newer version that contains a fix for this vulnerability.