CVE-2022-26354

—

CVSS 3.1

3.2 low

EPSS

<1%p33

Published

Mar 16, 2022 (Mar 16, 2022)

Modified

Jun 17, 2026

Description

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0.

Vendors: qemu debian
Products: qemu, debian linux
Weakness: CWE-772
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.