virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

An update is available for libguestfs, libnbd, libtpms, libguestfs-winsupport, nbdkit, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, swtpm, virt-v2v, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

ALSA-2022:5821 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

GSD-2022-1004562 KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()

KVM: x86: Fully initialize 'struct kvmlapicirq' in kvmpvkickcpuop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004549 x86/kvm: fix FASTOP_SIZE when return thunks are enabled

x86/kvm: fix FASTOPSIZE when return thunks are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.133 by commit...

GSD-2022-1004514 KVM: Don't null dereference ops->destroy

KVM: Don't null dereference ops-destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...

GSD-2022-1004474 KVM: arm64: Prevent kmemleak from accessing pKVM memory

KVM: arm64: Prevent kmemleak from accessing pKVM memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004386 KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()

KVM: x86: Fully initialize 'struct kvmlapicirq' in kvmpvkickcpuop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...

GSD-2022-1004369 x86/kvm: fix FASTOP_SIZE when return thunks are enabled

x86/kvm: fix FASTOPSIZE when return thunks are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.57 by commit...

GSD-2022-1004326 KVM: Don't null dereference ops->destroy

KVM: Don't null dereference ops-destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...

GSD-2022-1004272 KVM: arm64: Prevent kmemleak from accessing pKVM memory

KVM: arm64: Prevent kmemleak from accessing pKVM memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...

GSD-2022-1004167 KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()

KVM: x86: Fully initialize 'struct kvmlapicirq' in kvmpvkickcpuop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004147 KVM: VMX: Prevent RSB underflow before vmenter

KVM: VMX: Prevent RSB underflow before vmenter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

GSD-2022-1004144 x86/kvm: fix FASTOP_SIZE when return thunks are enabled

x86/kvm: fix FASTOPSIZE when return thunks are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

GSD-2022-1004100 KVM: Don't null dereference ops->destroy

KVM: Don't null dereference ops-destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

PT-2022-32648

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.18 through 5.15.55 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...

PT-2022-32409

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.18.14 Description The issue is related to preventing RSB underflow before vmenter in KVM: VMX. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-32429

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...

PT-2022-32811

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.133 Description The issue is related to the x86/kvm component of the Linux Kernel. It involves the fix for FASTOP SIZE when return thunks are enabled. The actual impact and attack plausibility have not yet...

PT-2022-32534

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue concerns the KVM on arm64, where kmemleak could access pKVM memory. This is a potential security issue, although its actual impact and attack plausibility have not been proven yet...