CVE-2021-3392

A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object 'req' from a pending requests queue. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. Versions between 2.10.0 and 5.2.0 are potentially affected.

• CWE-416
• CWE-416

• https://bugs.launchpad.net/qemu/+bug/1914236Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1924042Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210507-0001/Third Party Advisory
• https://bugs.launchpad.net/qemu/+bug/1914236Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1924042Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00009.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210507-0001/Third Party Advisory

Published

Mar 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33909fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before…7.8
• CVE-2021-3391MobileIron Mobile@Work through 2021-03-22 allows attackers t…5.3
• CVE-2021-33910basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, …5.5
• CVE-2021-33911Zoho ManageEngine ADManager Plus before 7110 allows remote c…9.8
• CVE-2021-33912libspf2 before 1.2.11 has a four-byte heap-based buffer over…9.8
• CVE-2021-33913libspf2 before 1.2.11 has a heap-based buffer overflow that …9.8
• CVE-2021-33923Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0…5.5
• CVE-2021-33924Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 a…9.8
• CVE-2021-33925SQL Injection vulnerability in nitinparashar30 cms-corephp t…9.8
• CVE-2021-33926An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, …8.8
• CVE-2021-33928Buffer overflow vulnerability in function pool_installable i…7.5
• CVE-2021-33929Buffer overflow vulnerability in function pool_disabled_solv…7.5