CVE-2025-54567
CVE-2025-54567 is a medium-severity vulnerability in Qemu with a CVSS 3.x base score of 4.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-684.
Key facts
- Severity: Medium (CVSS 3.x base score 4.2)
- EPSS exploit prediction: 0% (15th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-22565
- Weakness: CWE-684
- Affected product: Qemu
- Published:
- Last modified:
Description
hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
Frequently asked questions
- What is CVE-2025-54567?
- hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
- How severe is CVE-2025-54567?
- CVE-2025-54567 has a CVSS 3.x base score of 4.2, rated medium severity. It is exploitable over an adjacent network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability low.
- Is CVE-2025-54567 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-54567?
- CVE-2025-54567 affects Qemu. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2025-54567?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2025-54567 have an EU (EUVD) identifier?
- Yes. CVE-2025-54567 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-22565.
- When was CVE-2025-54567 published?
- CVE-2025-54567 was published on 2025-07-25 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
More vulnerabilities in Qemu
- CVE-2022-36648 — Critical (CVSS 10.0): The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier,…
- CVE-2017-16845 — Critical (CVSS 10.0): hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds…
- CVE-2015-8556 — Critical (CVSS 10.0): Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.
- CVE-2009-3616 — Critical (CVSS 9.9): Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS…
- CVE-2019-12929 — Critical (CVSS 9.8): The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to…
- CVE-2019-12928 — Critical (CVSS 9.8): The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the…
Other CWE-684 vulnerabilities
- CVE-2024-50357 — Critical (CVSS 9.8): FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in…
- CVE-2024-6425 — Critical (CVSS 9.1): Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote…
- CVE-2023-24845 — Critical (CVSS 9.1): A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM…
- CVE-2023-4258 — High (CVSS 8.6): In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be…
- CVE-2025-66384 — High (CVSS 8.2): app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity,…
- CVE-2025-58325 — High (CVSS 8.2): An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5…