Red Hat Security Advisory

RHSA-2025:4492

qemu-kvm security update

Released 2025-05-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) qemu-guest-agent-17:9.0.0-10.el9_5.3, qemu-img-17:9.0.0-10.el9_5.3, qemu-kvm-17:9.0.0-10.el9_5.3 +17

Fixes 2 records

TI-2024-03326 CVE-2024-3567 · GHSA-mqq7-33jf-2x53

Qemu-kvm: net: assertion failure in update_sctp_checksum()

MEDIUM 58

A flaw was found in QEMU.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00445 Published 2024-04-10 Fixed in 17:9.0.0-10.el9_5.3 CWE-617

TI-2023-06121 CVE-2023-6693 · GHSA-835p-c6x8-xh5f

Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()

LOW 24

A stack based buffer overflow was found in the virtio-net device of QEMU.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.0033 Published 2024-01-02 Partial fix · 8100020240314161907.e155f54d, 17:9.0.0-10.el9_5.3 CWE-121