Lucene search

K
oraclelinux
OracleLinuxELSA-2022-9432
HistoryMay 26, 2022 - 12:00 a.m.

qemu security update

2022-05-2600:00:00
linux.oracle.com
52

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

[15:4.2.1-17.el7]

  • arm/acpi: fix an out of spec _UID for PCI root (Michael S. Tsirkin)
  • arm/acpi: fix duplicated _UID of PCI interrupt link devices (Heyi Guo)
  • arm/acpi: fix PCI _PRT definition (Heyi Guo)
  • docs: fix references to docs/devel/atomics.rst (Stefano Garzarella) [Orabug: 33659123]
  • rcu: do not mention atomic_mb_read/set in documentation (Paolo Bonzini) [Orabug: 33659123]
  • atomics: update documentation (Paolo Bonzini) [Orabug: 33659123]
  • atomics: convert to reStructuredText (Paolo Bonzini) [Orabug: 33659123]
  • async: use explicit memory barriers (Paolo Bonzini) [Orabug: 33659123]
  • aio-wait: delegate polling of main AioContext if BQL not held (Paolo Bonzini) [Orabug: 33659123]
  • qapi: Add ‘@allow-write-only-overlay’ feature for ‘blockdev-snapshot’ (Peter Krempa) [Orabug: 33888021]
  • iotests: Add iothread cases to 155 (Kevin Wolf) [Orabug: 33888021]
  • block: Fix cross-AioContext blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
  • iotests: Test mirror with temporarily disabled target backing file (Kevin Wolf) [Orabug: 33888021]
  • iotests: Fix run_job() with use_log=False (Kevin Wolf) [Orabug: 33888021]
  • block: Relax restrictions for blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
  • block: Make bdrv_get_cumulative_perm() public (Kevin Wolf) [Orabug: 33888021]
  • iotests: Use complete_and_wait() in 155 (Max Reitz) [Orabug: 33888021]
  • iotests: Support job-complete in run_job() (Kevin Wolf) [Orabug: 33888021]
  • linux-headers: update again to 5.8 (Paolo Bonzini) [Orabug: 34022218]
  • virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 33941879] {CVE-2022-26353}
  • vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941844] {CVE-2022-26354}
  • virtio-net: fix use after unmap/free for sg (Jason Wang) [Orabug: 33972912] {CVE-2021-3748}
  • migration: Report the error returned when save_live_iterate fails (David Edmondson)
Use Vulners API to create your own security tool

API usage cases
  • Network scanning
  • Linux Patch management
  • Threat protection
  • No network audit solution

Ways of integration

Integrate Vulners API

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

Related for ELSA-2022-9432