CVE-2024-26328 Information

Description

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF and thus interaction with hw/nvme/ctrl.c is mishandled.

Reference

https://lore.kernel.org/all/20240213055345-mutt-send-email-mst%40kernel.org/