# CVE-2025-54567

## Summary

- **CVE ID:** CVE-2025-54567
- **Severity:** MEDIUM
- **CVSS Score:** 4.2 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
- **CWE:** CWE-684
- **Published:** Jul 25, 2025
- **Last Modified:** Mar 12, 2026

## Description

hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.

## Affected Products

- QEMU — QEMU (10.0.0)

## References

- [CNA](https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.24%
- **EPSS Percentile:** 15.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._