Feed
QEMU

Guest CHS setup can crash QEMU with a divide by zero

Brief

The same command path also let an AHCI guest overflow the host integer used to compute the address.

Notes

6c712a86f6c8 (Denis V. Lunev, 2026-08-14). hw/ide. Reject an unsupported CHS translation. Reported-by Zheyu Ma. Public issue 2399 closed 2026-08-26, labels Audit Tooling::Fuzzer / Storage, not Kind::Security. Fixes 176e4961bb33. Cc: qemu-stable. No public CVE id. Trust: unprivileged guest, IDE/AHCI on pc and q35.

Landed with 324bb5ef83ad Merge tag pull-ide-2026-08-26 (2026-08-26 11:26 PT).

Commit 6c712a86f6c8d8bdd8a3ba6b39cbcd9550668c36

Sources