CVE-2021-4158

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	QEMU	Affects v6.0.0 and above.

References

https://access.redhat.com/security/cve/CVE-2021-4158Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2035002Issue Tracking, Patch, Third Party Advisory
https://gitlab.com/qemu-project/qemu/-/commit/9bd6565ccee68f72d5012e24646e12a1c662827ePatch, Third Party Advisory
https://gitlab.com/qemu-project/qemu/-/issues/770Exploit, Third Party Advisory
https://www.mail-archive.com/qemu-devel%40nongnu.org/msg857944.htmlPatch, Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-4158Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2035002Issue Tracking, Patch, Third Party Advisory
https://gitlab.com/qemu-project/qemu/-/commit/9bd6565ccee68f72d5012e24646e12a1c662827ePatch, Third Party Advisory
https://gitlab.com/qemu-project/qemu/-/issues/770Exploit, Third Party Advisory
https://www.mail-archive.com/qemu-devel%40nongnu.org/msg857944.htmlPatch, Third Party Advisory

Timeline

Published: Aug 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-415805.3The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token. This is exploitabl CVE-2021-415815.5x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When t CVE-2021-415836.5vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated CVE-2021-415847.5Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configura CVE-2021-415857.5Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop CVE-2021-415867.5In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the system user password.CVE-2021-415877.5In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other re CVE-2021-415888.1In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have CVE-2021-415899.8In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code executi CVE-2021-41594.4A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be ret CVE-2021-415905.3In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test. The installati CVE-2021-415919.4ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.