CVE-2018-20126 (NVD)

2018-12-20

hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.

Products Ubuntu_linux, Leap, Qemu
Type Missing Release of Resource after Effective Lifetime (CWE-772)
First patch - None (likely due to unavailable code)
Links • http://www.securityfocus.com/bid/106298
• https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg02824.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html
• https://usn.ubuntu.com/3923-1/
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00038.html