CVE-2023-1544: Fedoraproject Fedora

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

Affected products

• Fedoraproject Fedora: version 37 only
• Qemu Qemu: up to and including 7.2.0

Published 2023-03-23. Last modified 2026-06-17.