Migration State Inconsistency in QEMU Affects Multiple Versions
CVE-2025-54566

4.2MEDIUM

Key Information:

Vendor

Qemu
Status
Qemu
Vendor
CVE Published:
25 July 2025

What is CVE-2025-54566?

The QEMU hypervisor, specifically in the hw/pci/pcie_sriov.c module, reveals a critical migration state inconsistency. This issue affects QEMU versions before 10.0.3 and poses a significant risk to virtualized environments. Malicious actors can exploit this vulnerability to disrupt operations or compromise system integrity. Operators are advised to upgrade to the latest version to mitigate potential threats associated with this weakness.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

QEMU 10.0.0 <= 10.0.3

References

https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c...

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.