Lucene search

K
oraclelinuxOracleLinuxELSA-2023-12835
HistorySep 22, 2023 - 12:00 a.m.

qemu security update

2023-09-2200:00:00
linux.oracle.com
9
qemu
security update
fixes
virtio-crypto
sym request
lsi controller
atomic memslot
accelerator blocker api
pcie
vhost-vdpa
cve-2023-3180
cve-2023-0330
cve-2023-3301
unix
orabug

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

[15:4.2.1-28.el7]

  • virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180}
  • hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330}
  • kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35719844]
  • KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35719844]
  • accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35719844]
  • KVM: Use a big lock to replace per-kml slots_lock (Peter Xu) [Orabug: 35719844]
  • pcie: don’t set link state active if the slot is empty (Laurent Vivier) [Orabug: 35707933]
  • vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35662850] {CVE-2023-3301}

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%