# CVE-2020-14394: qemu: An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transf...

CVE-2020-14394 is fixed in 21 products on 1 platform, first by DEBIAN-CVE-2020-14394, released August 17, 2022. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2020-14394
- Priority: Routine
- CVSS: 3.2 (low)
- EPSS: 0.0039
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 17, 2022

## Description

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | qemu Debian 12.15 (bookworm) | 1:7.1+dfsg-1 | [DEBIAN-CVE-2020-14394](https://patchblox.com/security/data/fix/linux/debian-cve-2020-14394.md) | Aug 17, 2022 |
| Linux | qemu Debian 13.5 (trixie) | 1:7.1+dfsg-1 | [DEBIAN-CVE-2020-14394](https://patchblox.com/security/data/fix/linux/debian-cve-2020-14394.md) | Aug 17, 2022 |
| Linux | qemu Debian 14 | 1:7.1+dfsg-1 | [DEBIAN-CVE-2020-14394](https://patchblox.com/security/data/fix/linux/debian-cve-2020-14394.md) | Aug 17, 2022 |
| Linux | qemu Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-block-extra Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-block-extra 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-block-extra-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-block-extra Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-block-extra 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-block-extra-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-block-extra Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-block-extra 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-block-extra-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-guest-agent Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-guest-agent 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-guest-agent-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-guest-agent Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-guest-agent 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-guest-agent-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-guest-agent Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-guest-agent 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-guest-agent-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-kvm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-kvm 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-kvm-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-kvm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-kvm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-kvm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-arm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-arm 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-arm-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-arm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-arm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-arm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-arm Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-arm 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-arm-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-common Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-common 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-common-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-common Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-common 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-common-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-common Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-common 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-common-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-data Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-data 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-data-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-data Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-data 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-data-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-gui Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-gui 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-gui-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-gui Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-gui 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-gui-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-mips Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-mips 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-mips-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-mips Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-mips 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-mips-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-mips Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-mips 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-mips-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-misc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-misc 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-misc-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-misc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-misc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-misc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-misc Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-misc 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-misc-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-ppc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-ppc 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-ppc-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-ppc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-ppc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-ppc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-ppc Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-ppc 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-ppc-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-s390x Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-s390x 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-s390x-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-s390x Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-s390x 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-s390x-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-s390x Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-s390x 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-s390x-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-sparc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-sparc 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-sparc-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-sparc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-sparc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-sparc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-sparc Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-sparc 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-sparc-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-x86 Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-system-x86 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-x86-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-system-x86 Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-x86 Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-x86 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-x86-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-x86-microvm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86-microvm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-microvm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-x86-microvm Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-x86-microvm 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-x86-microvm-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-system-x86-xen Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86-xen 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-xen-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-x86-xen Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-system-x86-xen 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-system-x86-xen-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-user Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-user 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-user Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-user Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-user 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-user-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-user-binfmt Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-binfmt-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-user-binfmt Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user-binfmt 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-binfmt-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-user-binfmt Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-user-binfmt 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-user-binfmt-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-user-static Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-user-static 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-static-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-user-static Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user-static 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-static-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-user-static Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-user-static 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-user-static-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |
| Linux | qemu-utils Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.42+esm5 | [qemu-utils 1:2.11+dfsg-1ubuntu7.42+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-utils-1-2.11-dfsg-1ubuntu7.42-esm5.md) | Feb 19, 2026 |
| Linux | qemu-utils Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-utils 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-utils-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-utils Ubuntu 22.04.1 LTS (jammy) | 1:6.2+dfsg-2ubuntu6.16 | [qemu-utils 1:6.2+dfsg-2ubuntu6.16](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-qemu-utils-1-6.2-dfsg-2ubuntu6.16.md) | Nov 3, 2023 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.