Red Hat Security Advisory

RHSA-2022:5002

virt:av and virt-devel:av security and bug fix update

Released 2022-06-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Advanced Virtualization for RHEL 8.4.0.EUS SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.noarch::virt:av, SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src::virt-devel:av, SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src::virt:av +47

TI-2022-09727 CVE-2022-26353 · GHSA-xrwp-4qvv-59wr

LOW 38

A flaw was found in the virtio-net device of QEMU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02743 Published 2022-03-16 Partial fix CWE-772

TI-2021-03071 CVE-2021-4206 · GHSA-rxh4-5vqx-xjq8

LOW 37

A flaw was found in the QXL display device emulation in QEMU.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00834 Published 2022-04-29 Partial fix CWE-190

TI-2021-03072 CVE-2021-4207 · GHSA-9p8r-v33g-4939

LOW 36

A flaw was found in the QXL display device emulation in QEMU.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00402 Published 2022-04-29 Partial fix CWE-362

TI-2022-09728 CVE-2022-26354 · GHSA-jmf2-6wvc-36fj

LOW 16

A flaw was found in the vhost-vsock device of QEMU.

CVSS 3.1LOW 3.2 Local High privileges No interaction EPSS 0.00391 Published 2022-03-16 Partial fix CWE-772