Use-after-free in QEMU - CVE-2021-3748

Vulnerability identifier: #VU58813

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3748

CWE-ID: CWE-416

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote guest to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when in the virtio-net device of QEMU. A malicious guest can trigger the use-after-free error and execute arbitrary code on the host system with QEMU privileges.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

QEMU
Debian Linux
SUSE MicroOS
Anolis OS
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
Ubuntu
openEuler
Red Hat Enterprise Linux Advanced Virtualization
netcf
netcf-devel
netcf-libs
swtpm-tools-pkcs11
swtpm-tools
swtpm-libs
swtpm-devel
swtpm
libtpms
libtpms-devel
sgabios
sgabios-bin
libvirt-dbus
python3-hivex
ruby-hivex
perl-hivex
ocaml-hivex-devel
ocaml-hivex
hivex
hivex-devel
nbdfuse
libnbd-devel
libnbd
ocaml-libnbd
ocaml-libnbd-devel
python3-libnbd
libnbd-bash-completion
seabios-bin
seavgabios-bin
seabios
libiscsi-devel
libiscsi-utils
libiscsi
nbdkit-tar-filter
nbdkit-ssh-plugin
nbdkit-example-plugins
nbdkit-tar-plugin
nbdkit-server
nbdkit-python-plugin
nbdkit-nbd-plugin
nbdkit-linuxdisk-plugin
nbdkit-gzip-plugin
nbdkit-gzip-filter
nbdkit-tmpdisk-plugin
nbdkit-xz-filter
nbdkit-devel
nbdkit-curl-plugin
nbdkit-basic-plugins
nbdkit-bash-completion
nbdkit-basic-filters
nbdkit
nbdkit-vddk-plugin
virt-v2v-man-pages-uk
virt-v2v-man-pages-ja
virt-v2v
virt-v2v-bash-completion
ocaml-libguestfs-devel
ocaml-libguestfs
libguestfs
libguestfs-appliance
libguestfs-devel
libguestfs-gfs2
libguestfs-gobject
libguestfs-gobject-devel
libguestfs-java
libguestfs-java-devel
libguestfs-rescue
libguestfs-rsync
libguestfs-tools-c
libguestfs-tools
libguestfs-xfs
perl-Sys-Guestfs
python3-libguestfs
ruby-libguestfs
virt-dib
lua-guestfs
libguestfs-bash-completion
libguestfs-inspect-icons
libguestfs-javadoc
libguestfs-man-pages-ja
libguestfs-man-pages-uk
qemu-tools-debuginfo
qemu-tools
qemu-lang
qemu-kvm
qemu-guest-agent-debuginfo
qemu-guest-agent
qemu-debugsource
qemu-block-ssh-debuginfo
qemu-block-ssh
qemu-block-rbd-debuginfo
qemu-block-rbd
qemu-block-iscsi-debuginfo
qemu-block-iscsi
qemu-block-curl-debuginfo
qemu-block-curl
qemu
qemu-x86
qemu-x86-debuginfo
qemu-ppc
qemu-ppc-debuginfo
qemu-arm
qemu-arm-debuginfo
qemu-s390
qemu-s390-debuginfo
qemu-system-misc (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system (Ubuntu package)
qemu-ui-curses
qemu-ui-curses-debuginfo
qemu-ui-gtk
qemu-ui-gtk-debuginfo
qemu-ui-sdl
qemu-ui-sdl-debuginfo
qemu-audio-alsa
qemu-audio-alsa-debuginfo
qemu-audio-oss
qemu-audio-oss-debuginfo
qemu-audio-pa
qemu-audio-pa-debuginfo
qemu-audio-sdl
qemu-audio-sdl-debuginfo
qemu-debuginfo
qemu-img
qemu-help
qemu-seabios
qemu-ui-spice-app-debuginfo
qemu-microvm
qemu-ui-spice-app
qemu-system-x86-xen (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu (Debian package)
qemu-chardev-spice
qemu-audio-spice-debuginfo
qemu-audio-spice
qemu-ksm
qemu-chardev-baum-debuginfo
qemu-chardev-baum
qemu-chardev-spice-debuginfo
qemu-ui-opengl-debuginfo
qemu-ui-opengl
qemu-hw-display-virtio-gpu
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-ui-spice-core-debuginfo
qemu-skiboot
qemu-ui-spice-core
qemu-hw-display-virtio-gpu-debuginfo
qemu-hw-s390x-virtio-gpu-ccw
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-hw-usb-redirect-debuginfo
qemu-hw-usb-redirect
qemu-hw-display-virtio-vga-debuginfo
qemu-hw-display-virtio-vga
qemu-hw-display-qxl-debuginfo
qemu-hw-display-qxl
qemu-s390x-debuginfo
qemu-s390x
supermin-devel
supermin
qemu-kvm-block-rbd
qemu-kvm-block-gluster
qemu-kvm-hw-usbredir
qemu-kvm-ui-opengl
qemu-kvm-ui-spice
qemu-kvm-tests
qemu-kvm-docs
qemu-kvm-core
qemu-kvm-common
qemu-kvm-block-ssh
qemu-kvm-block-iscsi
qemu-kvm-block-curl
python3-libvirt
perl-Sys-Virt
libvirt-devel
libvirt-daemon-driver-storage-mpath
libvirt-wireshark
libvirt-nss
libvirt-lock-sanlock
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-scsi
libvirt-daemon-kvm
libvirt-docs
libvirt-libs
libvirt-daemon-config-network
libvirt-daemon-driver-interface
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage
libvirt-daemon-driver-secret
libvirt-daemon-driver-qemu
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-network
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-config-nwfilter
libvirt-daemon
libvirt-client
libvirt
libguestfs-winsupport
qemu-sgabios

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

netcf - update to 0.2.8-12
netcf-devel - update to 0.2.8-12
netcf-libs - update to 0.2.8-12
swtpm-tools-pkcs11 - update to 0.7.0-1.20211109gitb79fd91
swtpm-tools - update to 0.7.0-1.20211109gitb79fd91
swtpm-libs - update to 0.7.0-1.20211109gitb79fd91
swtpm-devel - update to 0.7.0-1.20211109gitb79fd91
swtpm - update to 0.7.0-1.20211109gitb79fd91
libtpms - update to 0.9.1-0.20211126git1ff6fe1f43
libtpms-devel - update to 0.9.1-0.20211126git1ff6fe1f43
sgabios - update to 0.20170427git-3
sgabios-bin - update to 0.20170427git-3
libvirt-dbus - update to 1.3.0-2
python3-hivex - update to 1.3.18-23
ruby-hivex - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
ocaml-hivex-devel - update to 1.3.18-23
ocaml-hivex - update to 1.3.18-23
hivex - update to 1.3.18-23
hivex-devel - update to 1.3.18-23
nbdfuse - update to 1.6.0-5
libnbd-devel - update to 1.6.0-5
libnbd - update to 1.6.0-5
ocaml-libnbd - update to 1.6.0-5
ocaml-libnbd-devel - update to 1.6.0-5
python3-libnbd - update to 1.6.0-5
libnbd-bash-completion - update to 1.6.0-5
seabios-bin - update to 1.15.0-2
seavgabios-bin - update to 1.15.0-2
seabios - update to 1.15.0-2
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi-utils - update to 1.18.0-8.0.1
libiscsi - update to 1.18.0-8.0.1
nbdkit-tar-filter - update to 1.24.0-4
nbdkit-ssh-plugin - update to 1.24.0-4
nbdkit-example-plugins - update to 1.24.0-4
nbdkit-tar-plugin - update to 1.24.0-4
nbdkit-server - update to 1.24.0-4
nbdkit-python-plugin - update to 1.24.0-4
nbdkit-nbd-plugin - update to 1.24.0-4
nbdkit-linuxdisk-plugin - update to 1.24.0-4
nbdkit-gzip-plugin - update to 1.24.0-4
nbdkit-gzip-filter - update to 1.24.0-4
nbdkit-tmpdisk-plugin - update to 1.24.0-4
nbdkit-xz-filter - update to 1.24.0-4
nbdkit-devel - update to 1.24.0-4
nbdkit-curl-plugin - update to 1.24.0-4
nbdkit-basic-plugins - update to 1.24.0-4
nbdkit-bash-completion - update to 1.24.0-4
nbdkit-basic-filters - update to 1.24.0-4
nbdkit - update to 1.24.0-4
nbdkit-vddk-plugin - update to 1.24.0-4
virt-v2v-man-pages-uk - update to 1.42.0-19
virt-v2v-man-pages-ja - update to 1.42.0-19
virt-v2v - update to 1.42.0-19
virt-v2v-bash-completion - update to 1.42.0-19
ocaml-libguestfs-devel - update to 1.44.0-5.0.1
ocaml-libguestfs - update to 1.44.0-5.0.1
libguestfs - update to 1.44.0-5.0.1
libguestfs-appliance - update to 1.44.0-5.0.1
libguestfs-devel - update to 1.44.0-5.0.1
libguestfs-gfs2 - update to 1.44.0-5.0.1
libguestfs-gobject - update to 1.44.0-5.0.1
libguestfs-gobject-devel - update to 1.44.0-5.0.1
libguestfs-java - update to 1.44.0-5.0.1
libguestfs-java-devel - update to 1.44.0-5.0.1
libguestfs-rescue - update to 1.44.0-5.0.1
libguestfs-rsync - update to 1.44.0-5.0.1
libguestfs-tools-c - update to 1.44.0-5.0.1
libguestfs-tools - update to 1.44.0-5.0.1
libguestfs-xfs - update to 1.44.0-5.0.1
perl-Sys-Guestfs - update to 1.44.0-5.0.1
python3-libguestfs - update to 1.44.0-5.0.1
ruby-libguestfs - update to 1.44.0-5.0.1
virt-dib - update to 1.44.0-5.0.1
lua-guestfs - update to 1.44.0-5.0.1
libguestfs-bash-completion - update to 1.44.0-5.0.1
libguestfs-inspect-icons - update to 1.44.0-5.0.1
libguestfs-javadoc - update to 1.44.0-5.0.1
libguestfs-man-pages-ja - update to 1.44.0-5.0.1
libguestfs-man-pages-uk - update to 1.44.0-5.0.1
qemu-tools-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-tools - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-lang - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-kvm - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-guest-agent-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-guest-agent - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-debugsource - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-ssh-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-ssh - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-rbd-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-rbd - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-iscsi-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-iscsi - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-curl-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-block-curl - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-x86 - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-x86-debuginfo - addressed in versions 2.9.1-43.62.1, 4.2.1-11.31.3, 5.2.0-106.4
qemu-ppc - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-ppc-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-arm - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-arm-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-s390 - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3
qemu-s390-debuginfo - addressed in versions 2.9.1-43.62.1, 3.1.1.1-60.2, 4.2.1-11.31.3
qemu-system-misc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system-ppc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.39, 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-ui-curses - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-ui-gtk - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-ui-sdl - update to 3.1.1.1-60.2
qemu-ui-sdl-debuginfo - update to 3.1.1.1-60.2
qemu-audio-alsa - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-audio-oss - update to 3.1.1.1-60.2
qemu-audio-oss-debuginfo - update to 3.1.1.1-60.2
qemu-audio-pa - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-60.2, 4.2.1-11.31.3, 5.2.0-106.4
qemu-audio-sdl - update to 3.1.1.1-60.2
qemu-audio-sdl-debuginfo - update to 3.1.1.1-60.2
qemu-block-iscsi - addressed in versions 4.1.0-57, 4.1.0-63
qemu-block-ssh - addressed in versions 4.1.0-57, 4.1.0-63
qemu-guest-agent - addressed in versions 4.1.0-57, 4.1.0-63
qemu-block-curl - addressed in versions 4.1.0-57, 4.1.0-63
qemu-debuginfo - addressed in versions 4.1.0-57, 4.1.0-63
qemu-img - addressed in versions 4.1.0-57, 4.1.0-63
qemu-help - addressed in versions 4.1.0-57, 4.1.0-63
qemu-seabios - addressed in versions 4.1.0-57, 4.1.0-63
qemu-block-rbd - addressed in versions 4.1.0-57, 4.1.0-63
qemu-debugsource - addressed in versions 4.1.0-57, 4.1.0-63
qemu - addressed in versions 4.1.0-57, 4.1.0-63
qemu-debuginfo - addressed in versions 4.2.1-11.31.3, 5.2.0-106.4
qemu-ui-spice-app-debuginfo - addressed in versions 4.2.1-11.31.3, 5.2.0-106.4
qemu-microvm - update to 4.2.1-11.31.3
qemu-ui-spice-app - addressed in versions 4.2.1-11.31.3, 5.2.0-106.4
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2
qemu (Debian package) - update to 1:5.2+dfsg-11+deb11u1
qemu-chardev-spice - update to 5.2.0-106.4
qemu-audio-spice-debuginfo - update to 5.2.0-106.4
qemu-audio-spice - update to 5.2.0-106.4
qemu-ksm - update to 5.2.0-106.4
qemu-chardev-baum-debuginfo - update to 5.2.0-106.4
qemu-chardev-baum - update to 5.2.0-106.4
qemu-chardev-spice-debuginfo - update to 5.2.0-106.4
qemu-ui-opengl-debuginfo - update to 5.2.0-106.4
qemu-ui-opengl - update to 5.2.0-106.4
qemu-hw-display-virtio-gpu - update to 5.2.0-106.4
qemu-hw-display-virtio-gpu-pci - update to 5.2.0-106.4
qemu-hw-display-virtio-gpu-pci-debuginfo - update to 5.2.0-106.4
qemu-ui-spice-core-debuginfo - update to 5.2.0-106.4
qemu-skiboot - update to 5.2.0-106.4
qemu-ui-spice-core - update to 5.2.0-106.4
qemu-hw-display-virtio-gpu-debuginfo - update to 5.2.0-106.4
qemu-hw-s390x-virtio-gpu-ccw - update to 5.2.0-106.4
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - update to 5.2.0-106.4
qemu-hw-usb-redirect-debuginfo - update to 5.2.0-106.4
qemu-hw-usb-redirect - update to 5.2.0-106.4
qemu-hw-display-virtio-vga-debuginfo - update to 5.2.0-106.4
qemu-hw-display-virtio-vga - update to 5.2.0-106.4
qemu-hw-display-qxl-debuginfo - update to 5.2.0-106.4
qemu-hw-display-qxl - update to 5.2.0-106.4
qemu-s390x-debuginfo - update to 5.2.0-106.4
qemu-s390x - update to 5.2.0-106.4
supermin-devel - update to 5.2.1-1
supermin - update to 5.2.1-1
qemu-kvm-block-rbd - update to 6.2.0-11.0.1
qemu-kvm-block-gluster - update to 6.2.0-11.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-11.0.1
qemu-kvm-ui-opengl - update to 6.2.0-11.0.1
qemu-kvm-ui-spice - update to 6.2.0-11.0.1
qemu-kvm-tests - update to 6.2.0-11.0.1
qemu-kvm-docs - update to 6.2.0-11.0.1
qemu-kvm-core - update to 6.2.0-11.0.1
qemu-kvm-common - update to 6.2.0-11.0.1
qemu-kvm-block-ssh - update to 6.2.0-11.0.1
qemu-kvm-block-iscsi - update to 6.2.0-11.0.1
qemu-kvm - update to 6.2.0-11.0.1
qemu-img - update to 6.2.0-11.0.1
qemu-guest-agent - update to 6.2.0-11.0.1
qemu-kvm-block-curl - update to 6.2.0-11.0.1
python3-libvirt - update to 8.0.0-1
perl-Sys-Virt - update to 8.0.0-1
libvirt-devel - update to 8.0.0-5.2
libvirt-daemon-driver-storage-mpath - update to 8.0.0-5.2
libvirt-wireshark - update to 8.0.0-5.2
libvirt-nss - update to 8.0.0-5.2
libvirt-lock-sanlock - update to 8.0.0-5.2
libvirt-daemon-driver-storage-rbd - update to 8.0.0-5.2
libvirt-daemon-driver-storage-scsi - update to 8.0.0-5.2
libvirt-daemon-kvm - update to 8.0.0-5.2
libvirt-docs - update to 8.0.0-5.2
libvirt-libs - update to 8.0.0-5.2
libvirt-daemon-config-network - update to 8.0.0-5.2
libvirt-daemon-driver-interface - update to 8.0.0-5.2
libvirt-daemon-driver-storage-gluster - update to 8.0.0-5.2
libvirt-daemon-driver-storage-disk - update to 8.0.0-5.2
libvirt-daemon-driver-storage-core - update to 8.0.0-5.2
libvirt-daemon-driver-storage - update to 8.0.0-5.2
libvirt-daemon-driver-secret - update to 8.0.0-5.2
libvirt-daemon-driver-qemu - update to 8.0.0-5.2
libvirt-daemon-driver-nwfilter - update to 8.0.0-5.2
libvirt-daemon-driver-nodedev - update to 8.0.0-5.2
libvirt-daemon-driver-network - update to 8.0.0-5.2
libvirt-daemon-driver-storage-logical - update to 8.0.0-5.2
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-5.2
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-5.2
libvirt-daemon-config-nwfilter - update to 8.0.0-5.2
libvirt-daemon - update to 8.0.0-5.2
libvirt-client - update to 8.0.0-5.2
libvirt - update to 8.0.0-5.2
libguestfs-winsupport - update to 8.6-1
qemu-sgabios - addressed in versions 8-11.31.3, 8-43.62.1, 8-60.2, 8-106.4

• https://bugzilla.redhat.com/show_bug.cgi?id=1998514
• https://gitlab.com/qemu-project/qemu/-/issues/535

• Remote code execution in QEMU
• Advanced Virtualization for RHEL 8 update for the virt:8.2 and virt-devel:8.2 modules
• SUSE update for qemu
• SUSE update for qemu
• SUSE update for qemu
• SUSE update for qemu
• Ubuntu update for qemu
• Debian update for qemu
• openEuler update for qemu
• openEuler update for qemu
• Red Hat Enterprise Linux Advanced Virtualization 8 update for the virt:av and virt-devel:av modules
• Anolis OS update for virt:an module