CVE-2023-0330: Debian Linux

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.

Affected products

• Debian Debian Linux: version 10.0 only
• Qemu Qemu: from 7.2.0, before 7.2.3 (fixed in 7.2.3); version 8.0.0 only

Published 2023-03-06. Last modified 2026-06-17.