CVE-2021-3929

A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvme_ctrl_reset(), data structs will be freed leading to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition or, potentially, executing arbitrary code within the context of the QEMU process on the host.

• CWE-416
• CWE-416

• https://access.redhat.com/security/cve/CVE-2021-3929Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2020298Issue Tracking, Patch, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/commit/736b01642d85be832385Patch, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/556Issue Tracking, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/782Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHNN7QJCEQH7AQG5AQP2GEFAQE6K635I/
• https://access.redhat.com/security/cve/CVE-2021-3929Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2020298Issue Tracking, Patch, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/commit/736b01642d85be832385Patch, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/556Issue Tracking, Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/issues/782Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHNN7QJCEQH7AQG5AQP2GEFAQE6K635I/
• https://security.netapp.com/advisory/ntap-20250228-0010/

Published

Aug 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39280Certain Korenix JetWave devices allow authenticated users to…8.8
• CVE-2021-39282Live555 through 1.08 has a memory leak in AC3AudioStreamPars…7.5
• CVE-2021-39283liveMedia/FramedSource.cpp in Live555 through 1.08 allows an…5.5
• CVE-2021-39285A XSS vulnerability exists in Versa Director Release: 16.1R2…6.1
• CVE-2021-39286Webrecorder pywb before 2.6.0 allows XSS because it does not…6.1
• CVE-2021-39289Certain NetModule devices have Insecure Password Handling (c…7.5
• CVE-2021-39290Certain NetModule devices allow Limited Session Fixation via…9.8
• CVE-2021-39291Certain NetModule devices allow credentials via GET paramete…8.8
• CVE-2021-39293In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1,…7.5
• CVE-2021-39295In OpenBMC 2.9, crafted IPMI messages allow an attacker to c…7.5
• CVE-2021-39296In OpenBMC 2.9, crafted IPMI messages allow an attacker to b…10
• CVE-2021-39297Potential vulnerabilities have been identified in UEFI firmw…8.8