Red Hat Security Advisory

RHSA-2022:5821

virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Released 2022-08-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) SLOF-20210217-1.module+el8.6.0+14480+c0a3aa0f.noarch::virt:rhel, SLOF-20210217-1.module+el8.6.0+14480+c0a3aa0f.src::virt:rhel, hivex-1.3.18-23.module+el8.6.0+14480+c0a3aa0f.aarch64::virt:rhel +47
Red Hat Enterprise Linux CRB (v. 8) SLOF-20210217-1.module+el8.6.0+14480+c0a3aa0f.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.6.0+14480+c0a3aa0f.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.6.0+14480+c0a3aa0f.i686::virt-devel:rhel +47

TI-2022-09727 CVE-2022-26353 · GHSA-xrwp-4qvv-59wr

LOW 38

A flaw was found in the virtio-net device of QEMU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02743 Published 2022-03-16 Partial fix CWE-772

TI-2021-03071 CVE-2021-4206 · GHSA-rxh4-5vqx-xjq8

LOW 37

A flaw was found in the QXL display device emulation in QEMU.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00834 Published 2022-04-29 Partial fix CWE-190

TI-2021-03072 CVE-2021-4207 · GHSA-9p8r-v33g-4939

LOW 36

A flaw was found in the QXL display device emulation in QEMU.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00402 Published 2022-04-29 Partial fix CWE-362

TI-2022-09728 CVE-2022-26354 · GHSA-jmf2-6wvc-36fj

LOW 16

A flaw was found in the vhost-vsock device of QEMU.

CVSS 3.1LOW 3.2 Local High privileges No interaction EPSS 0.00391 Published 2022-03-16 Partial fix CWE-772