# CVE-2020-24165: qemu: An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate... CVE-2020-24165 is fixed in 21 products on 1 platform, first by DEBIAN-CVE-2020-24165, released August 28, 2023. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2020-24165 - Priority: High - CVSS: 8.8 (high) - EPSS: 0.0070 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Aug 28, 2023 ## Description An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid security issue by multiple third parties. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | qemu Debian 12.15 (bookworm) | 1:5.0-1 | [DEBIAN-CVE-2020-24165](https://patchblox.com/security/data/fix/linux/debian-cve-2020-24165.md) | Aug 28, 2023 | | Linux | qemu Debian 13.5 (trixie) | 1:5.0-1 | [DEBIAN-CVE-2020-24165](https://patchblox.com/security/data/fix/linux/debian-cve-2020-24165.md) | Aug 28, 2023 | | Linux | qemu Debian 14 | 1:5.0-1 | [DEBIAN-CVE-2020-24165](https://patchblox.com/security/data/fix/linux/debian-cve-2020-24165.md) | Aug 28, 2023 | | Linux | qemu Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-block-extra Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-block-extra 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-block-extra-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-guest-agent Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-guest-agent 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-guest-agent-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-kvm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-kvm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-kvm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-arm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-arm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-arm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-common Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-common 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-common-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-data Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-data 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-data-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-gui Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-gui 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-gui-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-mips Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-mips 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-mips-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-misc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-misc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-misc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-ppc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-ppc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-ppc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-s390x Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-s390x 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-s390x-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-sparc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-sparc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-sparc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-x86 Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-x86-microvm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86-microvm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-microvm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-system-x86-xen Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86-xen 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-xen-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-user Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-user-binfmt Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user-binfmt 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-binfmt-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-user-static Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user-static 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-static-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | | Linux | qemu-utils Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-utils 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-utils-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.