Bug 1215192 (CVE-2023-42467) - VUL-0: CVE-2023-42467: qemu,kvm: division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c
Summary: VUL-0: CVE-2023-42467: qemu,kvm: division by zero in scsi_disk_reset in hw/sc...
Status: NEW
Alias: CVE-2023-42467
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Dario Faggioli
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/377860/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-42467:4.4:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-11 06:54 UTC by Alexander Bergmann
Modified: 2023-11-30 07:58 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Bergmann 2023-09-11 06:54:31 UTC 
CVE-2023-42467

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in
hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent
s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.

Upstream commit:
https://gitlab.com/thuth/qemu/-/commit/3f91104484e5bf55b56d7e1b039a4a5a17d0c1a7

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42467
https://www.cve.org/CVERecord?id=CVE-2023-42467
https://gitlab.com/qemu-project/qemu/-/issues/1813