CVE-2020-25742 PUBLISHED

pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer.

EPSS 0.04% · 13.3th percentile

Risk Scores

EPSS Score
0.04%
13.3th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSqemu1:8.2.2+ds-0ubuntu1.5, 1:8.2.2+ds-0ubuntu1.4, 1:8.2.2+ds-0ubuntu1.2
Ubuntu:Pro:14.04:LTSqemu2.0.0+dfsg-2ubuntu1.34, 2.0.0+dfsg-2ubuntu1.35, 2.0.0+dfsg-2ubuntu1.36
Ubuntu:Pro:16.04:LTSqemu1:2.5+dfsg-5ubuntu10.51+esm3, 0, 1:2.3+dfsg-5ubuntu9
Ubuntu:Pro:18.04:LTSqemu1:2.11+dfsg-1ubuntu7.34, 0, 1:2.10+dfsg-0ubuntu3
Ubuntu:25.10qemu1:10.1.0+ds-5ubuntu2.2, 1:10.1.0+ds-5ubuntu2.1, 1:10.1.0+ds-5ubuntu2
Ubuntu:20.04:LTSqemu1:4.2-3ubuntu6.19, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.23
Ubuntu:22.04:LTSqemu1:6.2+dfsg-2ubuntu6.24, 1:6.2+dfsg-2ubuntu6.25, 1:6.2+dfsg-2ubuntu6.26

Timeline

References

Open in Interactive Console →