CVE-2021-3611: Qemu

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.

Affected products

• Qemu Qemu: before 7.0.0 (fixed in 7.0.0)
• Red Hat Enterprise Linux: version 8.0 only

Published 2022-05-11. Last modified 2026-06-17.