Allocation of Resources Without Limits or Throttling in QEMU - CVE-2025-14876

Vulnerability identifier: #VU123558

CSH Severity: Low

CVSS v4: 6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H]

CVE-ID: CVE-2025-14876

CWE-ID: CWE-770

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a malicious guest to perform a denial of service attack.

The vulnerability exists due to uncontrolled memory allocation in the virtio-crypto device in hw/virtio/virtio-crypto.c. A malicious guest can consume all available memory resources and terminate the QEMU process. 

QEMU
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro
Basesystem Module
Server Applications Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Ubuntu
qemu-ipxe
qemu-seabios
qemu-vgabios
qemu (Ubuntu package)
qemu-block-rbd
qemu-system-riscv
qemu-system-x86_64
qemu-help
qemu-system-arm
qemu-system-aarch64
qemu-img
qemu-hw-usb-host
qemu-guest-agent
qemu-debugsource
qemu-debuginfo
qemu-block-ssh
qemu-block-iscsi
qemu-block-curl
qemu
qemu-audio-pa-debuginfo
qemu-chardev-baum
qemu-block-gluster
qemu-accel-tcg-x86
qemu-linux-user-debuginfo
qemu-hw-usb-smartcard-debuginfo
qemu-audio-spice-debuginfo
qemu-ivshmem-tools-debuginfo
qemu-linux-user
qemu-extra
qemu-ui-spice-core-debuginfo
qemu-ui-dbus-debuginfo
qemu-ui-gtk
qemu-s390x-debuginfo
qemu-hw-usb-redirect-debuginfo
qemu-block-ssh-debuginfo
qemu-accel-qtest-debuginfo
qemu-linux-user-debugsource
qemu-audio-alsa-debuginfo
qemu-hw-display-virtio-gpu-pci
qemu-vhost-user-gpu
qemu-audio-pa
qemu-ksm
qemu-ui-opengl-debuginfo
qemu-audio-alsa
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-hw-usb-host-debuginfo
qemu-ppc
qemu-accel-tcg-x86-debuginfo
qemu-x86-debuginfo
qemu-ui-spice-app
qemu-tools
qemu-block-gluster-debuginfo
qemu-ivshmem-tools
qemu-hw-display-virtio-gpu
qemu-block-nfs-debuginfo
qemu-guest-agent-debuginfo
qemu-audio-jack-debuginfo
qemu-ui-curses
qemu-ui-gtk-debuginfo
qemu-block-iscsi-debuginfo
qemu-block-curl-debuginfo
qemu-ui-spice-app-debuginfo
qemu-block-nfs
qemu-audio-dbus
qemu-hw-display-virtio-vga-debuginfo
qemu-hw-display-virtio-vga
qemu-hw-s390x-virtio-gpu-ccw
qemu-hw-display-qxl
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-ppc-debuginfo
qemu-accel-qtest
qemu-hw-usb-smartcard
qemu-ui-curses-debuginfo
qemu-hw-display-qxl-debuginfo
qemu-hw-usb-redirect
qemu-block-dmg-debuginfo
qemu-hw-display-virtio-gpu-debuginfo
qemu-ui-spice-core
qemu-ui-dbus
qemu-arm
qemu-chardev-spice-debuginfo
qemu-chardev-baum-debuginfo
qemu-audio-oss
qemu-arm-debuginfo
qemu-headless
qemu-extra-debuginfo
qemu-vhost-user-gpu-debuginfo
qemu-audio-dbus-debuginfo
qemu-audio-jack
qemu-ui-opengl
qemu-block-dmg
qemu-tools-debuginfo
qemu-audio-oss-debuginfo
qemu-x86
qemu-s390x
qemu-chardev-spice
qemu-kvm
qemu-microvm
qemu-SLOF
qemu-lang
qemu-skiboot
qemu-block-rbd-debuginfo
qemu-audio-spice
qemu-user-static
qemu-user-binfmt
qemu-user
qemu-audio-pipewire
qemu-img-debuginfo
qemu-doc
qemu-pr-helper
qemu-spice
qemu-pr-helper-debuginfo
qemu-audio-pipewire-debuginfo
qemu-sgabios
qemu-vmsr-helper
qemu-vmsr-helper-debuginfo

Install updates from vendor's website.

QEMU - addressed in versions 10.0.8, 10.1.4, 10.2.1
qemu-ipxe - addressed in versions 1.0.0+-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-seabios - addressed in versions 1.16.0_0_gd239552-150500.49.39.2, 8.2.101.16.3_3_ga95067eb-150600.3.46.1, 9.2.41.16.3_3_g3d33c746-150700.3.17.1
qemu-vgabios - addressed in versions 1.16.0_0_gd239552-150500.49.39.2, 8.2.101.16.3_3_ga95067eb-150600.3.46.1, 9.2.41.16.3_3_g3d33c746-150700.3.17.1
qemu (Ubuntu package) - addressed in versions 1:6.2+dfsg-2ubuntu6.28, 1:8.2.2+ds-0ubuntu1.13, 1:10.1.0+ds-5ubuntu2.4
qemu-block-rbd - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-system-riscv - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-system-x86_64 - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-help - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-seabios - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-system-arm - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-system-aarch64 - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-img - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-hw-usb-host - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-guest-agent - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-debugsource - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-debuginfo - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-block-ssh - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-block-iscsi - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-block-curl - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu - addressed in versions 6.2.0-113, 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-audio-pa-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-chardev-baum - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-gluster - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1
qemu-accel-tcg-x86 - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-linux-user-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-usb-smartcard-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-spice-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ivshmem-tools-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-linux-user - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-extra - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-iscsi - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-spice-core-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-dbus-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-gtk - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-s390x-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-usb-redirect-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-ssh-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-accel-qtest-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-linux-user-debugsource - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-alsa-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-virtio-gpu-pci - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-curl - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-vhost-user-gpu - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-pa - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ksm - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-opengl-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-alsa - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-guest-agent - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-usb-host-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ppc - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-accel-tcg-x86-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-x86-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-spice-app - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-tools - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-gluster-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1
qemu-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ivshmem-tools - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-virtio-gpu - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-nfs-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-guest-agent-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-jack-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-curses - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-gtk-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-iscsi-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-curl-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-spice-app-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-nfs - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-usb-host - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-dbus - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-virtio-vga - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-qxl - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ppc-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-accel-qtest - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-usb-smartcard - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-curses-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-qxl-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-usb-redirect - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-dmg-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-debugsource - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-spice-core - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-dbus - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-arm - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-chardev-spice-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-chardev-baum-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-oss - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-arm-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-rbd - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-headless - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-extra-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-vhost-user-gpu-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-dbus-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-jack - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-ui-opengl - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-ssh - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-dmg - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-tools-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-oss-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-x86 - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-s390x - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-chardev-spice - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-kvm - update to 7.1.0-150500.49.39.2
qemu-microvm - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-SLOF - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-lang - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-skiboot - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-block-rbd-debuginfo - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-spice - addressed in versions 7.1.0-150500.49.39.2, 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-user-static - addressed in versions 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-user-binfmt - addressed in versions 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-user - addressed in versions 8.2.0-55, 8.2.0-56, 8.2.0-73
qemu-audio-pipewire - addressed in versions 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-img-debuginfo - addressed in versions 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-doc - update to 8.2.10-150600.3.46.1
qemu-pr-helper - addressed in versions 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-spice - addressed in versions 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-pr-helper-debuginfo - addressed in versions 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-img - addressed in versions 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-audio-pipewire-debuginfo - addressed in versions 8.2.10-150600.3.46.1, 9.2.4-150700.3.17.1
qemu-sgabios - update to 8-150500.49.39.2
qemu-vmsr-helper - update to 9.2.4-150700.3.17.1
qemu-vmsr-helper-debuginfo - update to 9.2.4-150700.3.17.1

• https://bugzilla.redhat.com/show_bug.cgi?id=2423549
• https://github.com/qemu/qemu/commit/91c6438caffc880e999a7312825479685d659b44

• Multiple vulnerabilities in QEMU
• Ubuntu update for qemu
• SUSE update for qemu
• SUSE update for qemu
• SUSE update for qemu
• openEuler 24.03 LTS SP2 update for qemu
• openEuler 24.03 LTS SP1 update for qemu
• openEuler 24.03 LTS update for qemu
• openEuler 22.03 LTS SP4 update for qemu
• openEuler 24.03 LTS SP3 update for qemu