PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2016-8909

CVE-2016-8909

Qemu: audio: intel-hda: infinite loop in processing dma buffer stream

Loading…

Severity

Low

Red Hat Product Security

3

CVSS 3.0

Review impact separately from score.

Published · October 20, 2016

Updated · November 2, 2026

Description

The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 3
CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

CVSS 2.0 · 2.3
AV:A/AC:M/Au:S/C:N/I:N/A:P

CWE-835 · Loop with Unreachable Exit Condition