CVE-2021-20181: Debian Linux
High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.
A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.
Affected products
Published 2021-05-13. Last modified 2026-06-17.