CVE-2023-40360

qemu-block-extra: QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive inhw/nvme/ctrl.c because there is no check for w...

CVE-2023-40360 is fixed in 141 products on 1 platform, first by DEBIAN-CVE-2023-40360, released August 14, 2023. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.0
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0036
30th percentile

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive inhw/nvme/ctrl.c because there is no check for whether an endurance group isconfigured before checking whether Flexible Data Placement is enabled.

Where it's fixed

ProductFixed inFixReleased
Linux
hivex · ol 8 0:1.3.18-23.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
hivex-devel · ol 8 0:1.3.18-23.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-appliance · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-bash-completion · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-devel · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-gfs2 · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-gobject · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-gobject-devel · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-inspect-icons · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-java · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-java-devel · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-javadoc · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-man-pages-ja · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-man-pages-uk · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-rescue · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-rsync · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-tools · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-tools-c · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-winsupport · ol 8 0:8.6-1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libguestfs-xfs · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libiscsi · ol 8 0:1.18.0-8.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libiscsi-devel · ol 8 0:1.18.0-8.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libiscsi-utils · ol 8 0:1.18.0-8.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libnbd · ol 8 0:1.6.0-5.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libnbd-bash-completion · ol 8 0:1.6.0-5.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libnbd-devel · ol 8 0:1.6.0-5.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libtpms · ol 8 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libtpms-devel · ol 8 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-client · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-config-network · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-config-nwfilter · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-interface · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-network · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-nodedev · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-nwfilter · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-qemu · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-secret · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-core · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-disk · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-gluster · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-iscsi · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-iscsi-direct · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-logical · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-mpath · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-rbd · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-driver-storage-scsi · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-daemon-kvm · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-dbus · ol 8 0:1.3.0-2.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-devel · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-docs · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-libs · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-lock-sanlock · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-nss · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
libvirt-wireshark · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
lua-guestfs · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdfuse · ol 8 0:1.6.0-5.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-bash-completion · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-basic-filters · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-basic-plugins · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-curl-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-devel · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-example-plugins · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-gzip-filter · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-gzip-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-linuxdisk-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-nbd-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-python-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-server · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-ssh-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-tar-filter · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-tar-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-tmpdisk-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-vddk-plugin · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
nbdkit-xz-filter · ol 8 0:1.24.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
netcf · ol 8 0:0.2.8-12.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
netcf-devel · ol 8 0:0.2.8-12.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
netcf-libs · ol 8 0:0.2.8-12.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
perl-Sys-Guestfs · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
perl-Sys-Virt · ol 8 0:6.0.0-1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
perl-hivex · ol 8 0:1.3.18-23.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
python3-hivex · ol 8 0:1.3.18-23.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
python3-libguestfs · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
python3-libnbd · ol 8 0:1.6.0-5.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
python3-libvirt · ol 8 0:7.10.0-4.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu · Debian 13.5 (trixie) 1:8.0.4+dfsg-2 DEBIAN-CVE-2023-40360 Aug 14, 2023
qemu · Debian 14 1:8.0.4+dfsg-2 DEBIAN-CVE-2023-40360 Aug 14, 2023
qemu-block-extra · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-block-extra 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-block-supplemental · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-block-supplemental 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-guest-agent · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-guest-agent 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-guest-agent · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-img · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm-block-curl · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm-block-gluster · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm-block-iscsi · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm-block-rbd · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm-block-ssh · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm-common · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-kvm-core · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
qemu-system · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-arm · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-arm 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-common · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-common 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-data · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-data 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-gui · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-gui 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-mips · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-mips 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-misc · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-misc 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-modules-opengl · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-modules-opengl 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-modules-spice · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-modules-spice 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-ppc · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-ppc 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-s390x · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-s390x 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-sparc · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-sparc 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-x86 · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-x86 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-x86-xen · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-x86-xen 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-system-xen · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-system-xen 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-user · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-user 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-user-binfmt · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-user-binfmt 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-user-static · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-user-static 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-utils · Ubuntu 24.10 (oracular) 1:8.1.3+ds-1ubuntu1 qemu-utils 1:8.1.3+ds-1ubuntu1 Jan 16, 2026
qemu-virtiofsd · ol 8 15:6.1.1-9.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
ruby-hivex · ol 8 0:1.3.18-23.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
ruby-libguestfs · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
seabios · ol 8 0:1.15.0-2.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
seabios-bin · ol 8 0:1.15.0-2.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
seavgabios-bin · ol 8 0:1.15.0-2.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
sgabios · ol 8 1:0.20170427git-3.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
sgabios-bin · ol 8 1:0.20170427git-3.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
supermin · ol 8 0:5.2.1-1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
supermin-devel · ol 8 0:5.2.1-1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
swtpm · ol 8 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
swtpm-devel · ol 8 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
swtpm-libs · ol 8 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
swtpm-tools · ol 8 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
swtpm-tools-pkcs11 · ol 8 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
virt-dib · ol 8 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
virt-v2v · ol 8 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
virt-v2v-bash-completion · ol 8 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
virt-v2v-man-pages-ja · ol 8 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024
virt-v2v-man-pages-uk · ol 8 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 ELSA-2024-12605 Sep 2, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.