TI-2022-00283 Aliases CVE-2022-0358 GHSA-mv2v-9q68-4c8h

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd)…

LOW 34CWE-273Published 2022-08-29 · Updated 2024-08-02

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Partial Red Hat: 8 fixed, 3 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

Why it matters now

EPSS 0.00333 26th percentileScored 2026-11-07

Fix Partial Red Hat: 5 advisoriesRed Hat: 8 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	QEMU/virtiofsd	Fixed in qemu v6.2.0-7	—	No fix listed	CNA

QEMU/virtiofsd Vendor— Affected Fixed in qemu v6.2.0-7 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:qemu:qemu::::::::	before 6.2.0-7	Vulnerable	QEMU
cpe:2.3:o:redhat:enterprise_linux:8.0::::advanced_virtualization:::	8.0	Vulnerable	Red Hat

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* Versions before 6.2.0-7 Vulnerable ·QEMU
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:* Versions 8.0 Vulnerable ·Red Hat

Remediation

Red Hat 5 advisories

RHSA-2022:0973 Released 2022-03-21 · Red Hat rating Moderate
virt:av and virt-devel:av qemu-kvm security update
- Advanced Virtualization CodeReady Builder for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt-devel:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2, hivex-devel-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2 +47
- Advanced Virtualization for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.noarch::virt:8.2, SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64::virt:8.2 +47
RHSA-2022:0971 Released 2022-03-21 · Red Hat rating Moderate
virt:av and virt-devel:av security and bug fix update
- Advanced Virtualization for RHEL 8.4.0.EUS SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.noarch::virt:av, SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src::virt-devel:av, SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src::virt:av +47
RHSA-2022:0949 Released 2022-03-16 · Red Hat rating Moderate
virt:av and virt-devel:av security and bug fix update
- Advanced Virtualization for RHEL 8.5.0.Z SLOF-20210217-1.module+el8.5.0+10946+35bb3930.noarch::virt:av, SLOF-20210217-1.module+el8.5.0+10946+35bb3930.src::virt-devel:av, SLOF-20210217-1.module+el8.5.0+10946+35bb3930.src::virt:av +47

Show 2 more Red Hat advisories

RHSA-2022:0886 Released 2022-03-15 · Red Hat rating Moderate
virt:rhel and virt-devel:rhel security update
- Red Hat CodeReady Linux Builder (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt-devel:rhel, hivex-1.3.18-21.module+el8.5.0+10709+b3edb581.i686::virt-devel:rhel, hivex-devel-1.3.18-21.module+el8.5.0+10709+b3edb581.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.noarch::virt:rhel, SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt:rhel, hivex-1.3.18-21.module+el8.5.0+10709+b3edb581.aarch64::virt:rhel +47
RHSA-2022:0759 Released 2022-03-07 · Red Hat rating Moderate
virt:rhel and virt-devel:rhel security and bug fix update
- Red Hat Enterprise Linux AppStream EUS (v.8.4) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.noarch::virt:rhel, SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt:rhel, hivex-1.3.18-21.module+el8.4.0+10770+19c037f9.aarch64::virt:rhel +47
- Red Hat Enterprise Linux CRB EUS (v.8.4) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt-devel:rhel, hivex-1.3.18-21.module+el8.4.0+10770+19c037f9.i686::virt-devel:rhel, hivex-devel-1.3.18-21.module+el8.4.0+10770+19c037f9.i686::virt-devel:rhel +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 8 Advanced Virtualization	Affected	No fix yet
Red Hat OpenStack Platform 10 (Newton)	Affected	No fix planned: Out of support scope
Red Hat OpenStack Platform 13 (Queens)	Affected	No fix planned: Out of support scope
Advanced Virtualization CodeReady Builder for RHEL 8.2.1	Fixed	RHSA-2022:0973
Advanced Virtualization for RHEL 8.2.1	Fixed	RHSA-2022:0973
Advanced Virtualization for RHEL 8.4.0.EUS	Fixed	RHSA-2022:0971
Advanced Virtualization for RHEL 8.5.0.Z	Fixed	RHSA-2022:0949
Red Hat CodeReady Linux Builder (v. 8)	Fixed	RHSA-2022:0886
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2022:0886
Red Hat Enterprise Linux AppStream EUS (v.8.4)	Fixed	RHSA-2022:0759
Red Hat Enterprise Linux CRB EUS (v.8.4)	Fixed	RHSA-2022:0759

Not affected: 3 products

Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 9

Timeline

2026-10-02 Threatist record created from CVE-2022-0358
2026-10-03 Alias added: GHSA-mv2v-9q68-4c8h

References

Patch 2

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences