USN-5851-1: Linux kernel vulnerabilities

It was discovered that a memory leak existed in the Unix domain socket implementation of the Linux kernel. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2022-3543 It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly...

virt:kvm_utils security update

libvirt 5.7.0-38.el8 - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout Shaleen Bathla Orabug: 34826758 - security: fix SELinux label generation logic Daniel P. Berrange Orabug: 34773029 CVE-2021-3631 - qemu: Set default qdisc before setting bandwidth Michal...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2023-1289)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : qemu-kvm (EulerOS-SA-2023-1289)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicio...

Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update

An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 7 : qemu-kvm-rhev bug fix update (Important) (RHSA-2020:2342)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2342 advisory. - QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 - QEMU: slirp: OOB buffer access while emulating tcp protocols i...

RHEL 7 : qemu-kvm-rhev (RHSA-2020:4111)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4111 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...

openSUSE 15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2022:4613-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4613-1 advisory. The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

[SECURITY] Fedora 36 Update: qemu-6.2.0-17.fc36

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

GSD-2023-1000459 kprobes: kretprobe events missing on 2-core KVM guest

kprobes: kretprobe events missing on 2-core KVM guest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

PT-2023-33536 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue concerns kretprobe events missing on 2-core KVM guest. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

Fedora 36 : kernel / kernel-headers / kernel-tools (2023-3fd7349f60)

The remote Fedora 36 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-3fd7349f60 advisory. The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree. Tenable has...

CVE-2022-26354 affecting package qemu-kvm 4.2.0-44

CVE-2022-26354 affecting package qemu-kvm 4.2.0-44. A patched version of the package is available...

CVE-2021-4207 affecting package qemu-kvm 4.2.0-46

CVE-2021-4207 affecting package qemu-kvm 4.2.0-46. A patched version of the package is available...

CVE-2022-3872 affecting package qemu-kvm 4.2.0-46

CVE-2022-3872 affecting package qemu-kvm 4.2.0-46. A patched version of the package is available...

CVE-2021-20295 affecting package qemu-kvm 4.2.0-38

CVE-2021-20295 affecting package qemu-kvm 4.2.0-38. A patched version of the package is available...

CVE-2022-0358 affecting package qemu-kvm 4.2.0-41

CVE-2022-0358 affecting package qemu-kvm 4.2.0-41. A patched version of the package is available...

CVE-2022-2962 affecting package qemu-kvm 4.2.0-43

CVE-2022-2962 affecting package qemu-kvm 4.2.0-43. A patched version of the package is available...

Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update

An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RLSA-2023:0099 Moderate: virt:rhel and virt-devel:rhel security and bug fix update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting wi...