[SECURITY] Fedora 38 Update: rust-vhost-0.10.0-2.fc38

A pure rust library for vdpa, vhost and vhost-user...

Fedora: Security Advisory for rust-vhost (FEDORA-2024-f2305d485f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: rust-vhost-0.10.0-2.fc39

A pure rust library for vdpa, vhost and vhost-user...

Fedora: Security Advisory for rust-vhost (FEDORA-2024-04877592b7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

qemu-kvm security, bug fix, and enhancement update

8.0.0-16.el93 - kvm-migration-Add-migration-prefix-to-functions-in-targe.patch bz2229868 - kvm-migration-Move-more-initializations-to-migrateinit.patch bz2229868 - kvm-migration-Add-.saveprepare-handler-to-struct-SaveVM.patch bz2229868 -...

PT-2023-9695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use after free and double free error in the vhost vdpa probe function of the vhost-vdpa component in the Linux kernel. This error occurs because the put device...

kvm_utils3 security update

hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt 9.0.0-3.el8 - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' Peter Krempa Orabug: 35644221 CVE-2023-3750 - virpci: Resolve leak in virPCIVirtualFunctionList cleanup Tim Shearer Orabug: 35395469...

qemu security update

15:4.2.1-28.el7 - virtio-crypto: verify src&dst buffer length for sym request Zhenwei Pi Orabug: 35724113 CVE-2023-3180 - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller CVE-2023-0330 Thomas Huth Orabug: 35724112 CVE-2023-0330 - kvm: Atomic memslot updates David Hildenbrand Orabug...

qemu security update

15:4.2.1-28.el7 - virtio-crypto: verify src&dst buffer length for sym request Zhenwei Pi Orabug: 35724113 CVE-2023-3180 - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller CVE-2023-0330 Thomas Huth Orabug: 35724112 CVE-2023-0330 - kvm: Atomic memslot updates David Hildenbrand Orabug...

qemu-kvm security and bug fix update

7.2.0-14.el92.5 - rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization - CVE-2023-3354 QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service - hotplug/hotunplug mlx vdpa device to the...

ALSA-2023:5094 Important: qemu-kvm security and bug fix update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote...

PT-2025-40685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vdpa nl policy structure, used for validating netlink attributes nlattr during message parsing, lacked a necessary check for the maximum virtual queue pair VQP attribute. This missin...

PT-2025-41096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vdpa nl policy structure lacked a necessary length check for nlattr attributes during parsing of incoming nlmsg messages. This missing validation could lead to an out-of-bounds OOB...

Unbreakable Enterprise kernel security update

5.15.0-102.110.5 - RISC-V: Fix up a cherry-pick warning in setupvmfinal Alexandre Ghiti - Revert 'Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work' Liu Jian - riscv: mm: remove redundant parameter of createfdtearlypagetable Song Shuai - kernfs: change...

qemu security update

15:4.2.1-26.el7 - migration: check magic value for deciding the mapping of channels manish.mishra Orabug: 34735462 - io: Add support for MSGPEEK for socket channel manish.mishra Orabug: 34735462 - migration: Move channel setup out of postcopytryrecover Peter Xu Orabug: 34735462 - vdpa: commit all...

qemu-kvm security update

6.1.1-6.el9 - Update changelog Karl Heubaum Orabug: 35343538 - ebpf: fix compatibility with libbpf 1.0+ Shreesh Adiga Orabug: 35268538 - ebpf: replace deprecated bpfprogramsetsocketfilter Haochen Tong Orabug: 35268538 - CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 Karl Heubaum Orabug:...

kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service

A flaw was found in the vdpasim component of the Linux kernel. This memory leak vulnerability occurs when a module is probed and the deviceregister function fails within vdpasimnetinit or vdpasimblkinit. In such a scenario, the reference count of the kobject is not properly decreased, leading to...

kernel: Linux kernel: vhost-vdpa memory leak leading to Denial of Service

A flaw was found in the Linux kernel's vhost-vdpa component. This memory leak vulnerability occurs when an application using vhost-vdpa fails to properly invalidate I/O Translation Lookaside Buffer IOTLB entries or crashes. A local attacker or application could exploit this flaw, leading to memor...

kernel: vdpa_sim_blk: set number of address spaces and virtqueue groups

In the Linux kernel, the following vulnerability has been resolved: vdpasimblk: set number of address spaces and virtqueue groups Commit bda324fd037a "vdpasim: control virtqueue support" added two new fields nas, ngroups to vdpasimdevattr, but we forgot to initialize them for vdpasimblk. When...

PT-2025-25984 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the vdpa sim blk device, where two new fields nas, ngroups were added to vdpasim dev attr but not...