Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3253
HistoryMay 30, 2024 - 12:00 a.m.

virt:ol and virt-devel:rhel security update

2024-05-3000:00:00
linux.oracle.com
2
security update
virt:ol
virt-devel:rhel
hivex
libguestfs
libiscsi
libnbd
libtpms
libvirt
cve-2024-2494
cve-2023-6683
cve-2023-6693
cve-2023-5088
cve-2023-3019
keshav sharma

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.6%

hivex
libguestfs
libguestfs-winsupport
libiscsi
libnbd
libtpms
libvirt
[8.0.0-23.1.0.1]

  • Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
  • Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)
    [8.0.0-23.1.el8]
  • remote: check for negative array lengths before allocation (CVE-2024-2494)
    libvirt-dbus
    libvirt-python
    nbdkit
    netcf
    perl-Sys-Virt
    qemu-kvm
    [6.2.0-49]
  • kvm-glib-compat-Introduce-g_memdup2-wrapper.patch [RHEL-19628]
  • kvm-ui-clipboard-mark-type-as-not-available-when-there-i.patch [RHEL-19628]
  • kvm-virtio-net-correctly-copy-vnet-header-when-flushing-.patch [RHEL-19496]
  • Resolves: RHEL-19628
    (CVE-2023-6683 virt:rhel/qemu-kvm: QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() [rhel-8])
  • Resolves: RHEL-19496
    (CVE-2023-6693 virt:rhel/qemu-kvm: QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() [rhel-8])
    [6.2.0-48]
  • kvm-iotests-add-filter_qmp_generated_node_ids.patch [RHEL-7353]
  • kvm-iotests-port-141-to-Python-for-reliable-QMP-testing.patch [RHEL-7353]
  • kvm-monitor-only-run-coroutine-commands-in-qemu_aio_cont.patch [RHEL-7353]
  • kvm-iotests-Make-144-deterministic-again.patch [RHEL-7353]
  • Resolves: RHEL-7353
    ([qemu-kvm] no response with QMP command device_add when repeatedly hotplug/unplug virtio disks [RHEL-8])
    [6.2.0-47]
  • kvm-s390x-pci-avoid-double-enable-disable-of-aif.patch [RHEL-22411]
  • kvm-s390x-pci-refresh-fh-before-disabling-aif.patch [RHEL-22411]
  • kvm-s390x-pci-drive-ISM-reset-from-subsystem-reset.patch [RHEL-22411]
  • Resolves: RHEL-22411
    ([s390x] VM fails to start with ISM passed through)
    [6.2.0-46]
  • kvm-MAINTAINERS-split-out-s390x-sections.patch [RHEL-18214]
  • kvm-s390x-pv-remove-semicolon-from-macro-definition.patch [RHEL-18214]
  • kvm-hw-s390x-pv-Restrict-Protected-Virtualization-to-sys.patch [RHEL-18214]
  • kvm-hw-s390x-Move-KVM-specific-PV-from-hw-to-target-s390.patch [RHEL-18214]
  • kvm-target-s390x-kvm-pv-Provide-some-more-useful-informa.patch [RHEL-18214]
  • Resolves: RHEL-18214
    ([RHEL8][Secure-execution][s390x] The error message is not clear when boot up a SE guest with wrong encryption)
    [6.2.0-45]
  • kvm-acpi-fix-acpi_index-migration.patch [RHEL-20189]
  • kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-20189]
  • kvm-hw-arm-virt-Do-not-load-efi-virtio.rom-for-all-virti.patch [RHEL-14870]
  • Resolves: RHEL-20189
    ([RHEL.8.10.0]Failed to migrate guest with pc (i440x) between RHELAV 8.4.0 and RHEL 8.10.0)
  • Resolves: RHEL-14870
    ([rhel8]ipxe-roms-qemu does not provide efi-virtio.rom)
    [6.2.0-44]
  • kvm-hw-ide-reset-cancel-async-DMA-operation-before-reset.patch [RHEL-15437]
  • kvm-tests-qtest-ahci-test-add-test-exposing-reset-issue-.patch [RHEL-15437]
  • Resolves: RHEL-15437
    (CVE-2023-5088 virt:rhel/qemu-kvm: QEMU: improper IDE controller reset can lead to MBR overwrite [rhel-8])
    [6.2.0-43]
  • kvm-net-Provide-MemReentrancyGuard-to-qemu_new_nic.patch [RHEL-7309]
  • kvm-net-Update-MemReentrancyGuard-for-NIC.patch [RHEL-7309]
  • kvm-vhost-release-memory_listener-object-in-error-path.patch [RHEL-7567]
  • kvm-ui-fix-crash-when-there-are-no-active_console.patch [RHEL-2600]
  • Resolves: RHEL-7309
    (CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() [rhel-8])
  • Resolves: RHEL-7567
    ([RHEL8][clone]VM crash when guest running testpmd and delete created vhostuserclient port on host)
  • Resolves: RHEL-2600
    (qemu core dump occurs when client connects to VNC server because qemu cmd only adds vnc but without graphics device)
    [6.2.0-42]
  • kvm-target-s390x-dump-Remove-unneeded-dump-info-function.patch [RHEL-16696]
  • kvm-dump-Add-arch-cleanup-function.patch [RHEL-16696]
  • kvm-target-s390x-arch_dump-Add-arch-cleanup-function-for.patch [RHEL-16696]
  • Resolves: RHEL-16696
    (RHEL8 - KVM : Secure execution guest remains in ‘paused’ state, post ‘virsh dump’ failure (qemu-kvm))
    [6.2.0-41]
  • kvm-s390x-ap-fix-missing-subsystem-reset-registration.patch [bz#2111390]
  • kvm-s390x-do-a-subsystem-reset-before-the-unprotect-on-r.patch [bz#2111390]
  • kvm-redhat-Update-linux-headers-for-kvm_s390_vm_cpu_uv_f.patch [bz#2111390]
  • kvm-target-s390x-kvm-Refactor-AP-functionalities.patch [bz#2111390]
  • kvm-target-s390x-AP-passthrough-for-PV-guests.patch [bz#2111390]
  • Resolves: bz#2111390
    ([IBM 8.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - qemu part)
    seabios
    sgabios
    supermin
    swtpm
    virt-v2v

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.6%