Migration State Inconsistency in QEMU Affects Multiple Versions
CVE-2025-54566

4.2MEDIUM

Key Information:

Vendor

Qemu
Status
Qemu
Vendor
CVE Published:
25 July 2025

What is CVE-2025-54566?

The QEMU hypervisor, specifically in the hw/pci/pcie_sriov.c module, reveals a critical migration state inconsistency. This issue affects QEMU versions before 10.0.3 and poses a significant risk to virtualized environments. Malicious actors can exploit this vulnerability to disrupt operations or compromise system integrity. Operators are advised to upgrade to the latest version to mitigate potential threats associated with this weakness.

Affected Version(s)

QEMU 10.0.0 <= 10.0.3

References

https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c...

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54566 : Migration State Inconsistency in QEMU Affects Multiple Versions