Red Hat Security Advisory

RHSA-2024:9136

qemu-kvm security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) qemu-guest-agent-17:9.0.0-10.el9_5, qemu-img-17:9.0.0-10.el9_5, qemu-kvm-17:9.0.0-10.el9_5 +17

Fixes 3 records

TI-2024-06865 CVE-2024-7409 · GHSA-7c7g-wccp-rrhj

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

MEDIUM 41

A flaw was found in the QEMU NBD Server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01027 Published 2024-08-05 Partial fix · 7.2.0, 8.2.0 +12 CWE-662

TI-2024-03216 CVE-2024-3446 · GHSA-rgvf-j3x5-6277

Qemu: virtio: dma reentrancy issue leads to double free vulnerability

LOW 37

A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00305 Published 2024-04-09 Partial fix · 8100020240905091210.489197e6 CWE-415

TI-2024-17398 CVE-2024-26327 · GHSA-7m48-vw34-vw84

An issue was discovered in QEMU 7.1.0 through 8.2.1.

LOW 27

An issue was discovered in QEMU 7.1.0 through 8.2.1.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00596 Published 2024-02-19 Fixed CWE-122