This was assigned CVE-2019-12067 (patch not merged yet, though): https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01358.html Cheers, Moritz
Control: retitle -1 ahci: possible null dereference in ahci_commit_buf (CVE-2019-12067) This isn't only not merged, it is questioned, -- either the issue does not exist at all or this is only a symptom and the problem is elsewhere. It hasn't been updated since 8 Aug 2019. Thanks, /mjt