Red Hat Security Advisory

RHSA-2023:6980

virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) SLOF-20210217-1.module+el8.9.0+18724+20190c23.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel +47
Red Hat Enterprise Linux AppStream (v. 8) SLOF-20210217-1.module+el8.9.0+18724+20190c23.noarch::virt:rhel, SLOF-20210217-1.module+el8.9.0+18724+20190c23.src::virt:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.aarch64::virt:rhel +47

TI-2021-02683 CVE-2021-3750 · GHSA-2v3x-7c37-r5r2

LOW 36

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00513 Published 2022-05-02 Partial fix CWE-416

TI-2023-03088 CVE-2023-3301 · GHSA-cp42-9j6q-v649

LOW 25

A flaw was found in QEMU.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00259 Published 2023-09-13 Partial fix · 8.1.0-rc0 CWE-617