QEMU through 8.0.0 could trigger a division by zero in scsidiskreset in hw/scsi/scsi-disk.c because scsidiskemulatemodeselect does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.
{ "vanir_signatures": [ { "digest": { "length": 1628.0, "function_hash": "182529412819479445091322370509985480588" }, "signature_type": "Function", "deprecated": false, "source": "https://gitlab.com/qemu-project/qemu@7cfcc79b0ab800959716738aff9419f53fc68c9c", "id": "CVE-2023-42467-91d636c3", "target": { "function": "scsi_disk_emulate_mode_select", "file": "hw/scsi/scsi-disk.c" }, "signature_version": "v1" }, { "digest": { "threshold": 0.9, "line_hashes": [ "159116031001383623106929654388544614011", "213106166408374927049844477706965361715", "296091429330459402103431867587647831448", "157104157950030124143685422924716556926" ] }, "signature_type": "Line", "deprecated": false, "source": "https://gitlab.com/qemu-project/qemu@7cfcc79b0ab800959716738aff9419f53fc68c9c", "id": "CVE-2023-42467-d648bad9", "target": { "file": "hw/scsi/scsi-disk.c" }, "signature_version": "v1" } ] }