Use-after-free in QEMU - CVE-2021-3750

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU69353

Use-after-free in QEMU - CVE-2021-3750

Published: November 15, 2022


Vulnerability identifier: #VU69353
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-3750
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in the USB EHCI controller emulation of QEMU. A remote guest can trigger a use-after-free error and execute arbitrary code on the host OS.



Affected software

QEMU
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Ubuntu
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
Server Applications Module
openSUSE Leap
openEuler
qemu-system-s390x (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-aarch64 (Ubuntu package)
qemu (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-mips (Ubuntu package)
sgabios-bin
sgabios
qemu-ipxe
qemu-vgabios
qemu-seabios
seabios
seabios-bin
seavgabios-bin
qemu-block-iscsi
qemu-block-curl-debuginfo
qemu-audio-alsa
qemu-lang
qemu-block-rbd-debuginfo
qemu-x86-debuginfo
qemu-kvm
qemu-block-ssh-debuginfo
qemu
qemu-debuginfo
qemu-ui-gtk-debuginfo
qemu-ui-curses-debuginfo
qemu-audio-pa-debuginfo
qemu-x86
qemu-audio-oss
qemu-tools-debuginfo
qemu-guest-agent-debuginfo
qemu-guest-agent
qemu-tools
qemu-block-ssh
qemu-s390-debuginfo
qemu-block-iscsi-debuginfo
qemu-s390
qemu-ppc-debuginfo
qemu-ui-curses
qemu-ui-gtk
qemu-block-rbd
qemu-audio-pa
qemu-debugsource
qemu-block-curl
qemu-audio-alsa-debuginfo
qemu-audio-oss-debuginfo
qemu-ppc
qemu-arm-debuginfo
qemu-arm
qemu-help
qemu-img
qemu-ui-spice-app
qemu-ui-spice-app-debuginfo
qemu-microvm
qemu-system-x86-xen (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu-hw-usb-redirect
qemu-chardev-spice-debuginfo
qemu-audio-spice-debuginfo
qemu-chardev-baum-debuginfo
qemu-ui-opengl
qemu-hw-usb-redirect-debuginfo
qemu-ui-spice-core
qemu-chardev-spice
qemu-audio-spice
qemu-hw-s390x-virtio-gpu-ccw
qemu-ksm
qemu-ui-opengl-debuginfo
qemu-hw-display-virtio-vga
qemu-hw-display-virtio-vga-debuginfo
qemu-chardev-baum
qemu-s390x
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-s390x-debuginfo
qemu-skiboot
qemu-SLOF
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-hw-display-virtio-gpu-debuginfo
qemu-ui-spice-core-debuginfo
qemu-hw-display-qxl-debuginfo
qemu-hw-display-virtio-gpu
qemu-hw-display-qxl
qemu-system-aarch64
qemu-system-arm
qemu-hw-usb-host
qemu-system-riscv
qemu-system-x86_64
qemu-kvm-block-ssh
qemu-kvm-ui-spice
qemu-kvm-common
qemu-kvm-block-rbd
qemu-kvm-block-iscsi
qemu-kvm-block-curl
qemu-kvm-core
qemu-kvm-docs
qemu-kvm-tests
qemu-kvm-block-gluster
qemu-kvm-hw-usbredir
qemu-kvm-ui-opengl
qemu-user-static
qemu-block-gluster-debuginfo
qemu-accel-qtest
qemu-vhost-user-gpu
qemu-linux-user-debuginfo
qemu-extra
qemu-linux-user-debugsource
qemu-accel-tcg-x86
qemu-hw-usb-host-debuginfo
qemu-ivshmem-tools
qemu-linux-user
qemu-block-gluster
qemu-block-dmg-debuginfo
qemu-hw-usb-smartcard
qemu-accel-tcg-x86-debuginfo
qemu-hw-usb-smartcard-debuginfo
qemu-block-dmg
qemu-ivshmem-tools-debuginfo
qemu-audio-jack-debuginfo
qemu-block-nfs-debuginfo
qemu-extra-debuginfo
qemu-accel-qtest-debuginfo
qemu-audio-jack
qemu-vhost-user-gpu-debuginfo
qemu-block-nfs
qemu-kvm (Red Hat package)
qemu-sgabios
VMware Tanzu Operations Manager

How to mitigate CVE-2021-3750

Install updates from vendor's website.

QEMU - update to 7.0.0
qemu-system-s390x (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-misc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-sparc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-x86 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-arm (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-aarch64 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
qemu (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6
qemu-system-ppc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-mips (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
sgabios-bin - update to 0.20170427git-3
sgabios - update to 0.20170427git-3
qemu-ipxe - addressed in versions 1.0.0+-150100.80.51.5, 1.0.0+-150200.79.1, 1.0.0+-150300.127.3, 1.0.0+-150400.37.23.1
qemu-vgabios - addressed in versions 1.12.0_0_ga698c89-150100.80.51.5, 1.12.1+-150200.79.1, 1.14.0_0_g155821a-150300.127.3, 1.15.0_0_g2dd4b9b-150400.37.23.1
qemu-seabios - addressed in versions 1.12.0_0_ga698c89-150100.80.51.5, 1.12.1+-150200.79.1, 1.14.0_0_g155821a-150300.127.3, 1.15.0_0_g2dd4b9b-150400.37.23.1
seabios - update to 1.16.0-4
seabios-bin - update to 1.16.0-4
seavgabios-bin - update to 1.16.0-4
VMware Tanzu Operations Manager - addressed in versions 2.10.51, 3.0.2
qemu-block-iscsi - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-block-curl-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-alsa - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-lang - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-block-rbd-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-x86-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-kvm - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-block-ssh-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-x86 - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-oss - addressed in versions 3.1.1.1-150100.80.51.5, 6.2.0-150400.37.23.1
qemu-tools-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-guest-agent-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-guest-agent - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-tools - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-block-ssh - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-s390-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-s390 - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-curses - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-gtk - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-block-rbd - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-pa - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-debugsource - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-block-curl - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-oss-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 6.2.0-150400.37.23.1
qemu-ppc - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-arm-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-arm - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu - addressed in versions 4.1.0-64, 6.2.0-41
qemu-help - addressed in versions 4.1.0-64, 6.2.0-41
qemu-img - addressed in versions 4.1.0-64, 6.2.0-41
qemu-block-ssh - addressed in versions 4.1.0-64, 6.2.0-41
qemu-debuginfo - addressed in versions 4.1.0-64, 6.2.0-41
qemu-block-curl - addressed in versions 4.1.0-64, 6.2.0-41
qemu-debugsource - addressed in versions 4.1.0-64, 6.2.0-41
qemu-guest-agent - addressed in versions 4.1.0-64, 6.2.0-41
qemu-block-iscsi - addressed in versions 4.1.0-64, 6.2.0-41
qemu-block-rbd - addressed in versions 4.1.0-64, 6.2.0-41
qemu-seabios - addressed in versions 4.1.0-64, 6.2.0-41
qemu-ui-spice-app - addressed in versions 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-spice-app-debuginfo - addressed in versions 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-microvm - addressed in versions 4.2.1-150200.79.1, 6.2.0-150400.37.23.1
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6
qemu-hw-usb-redirect - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-chardev-spice-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-spice-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-chardev-baum-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-opengl - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-usb-redirect-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-spice-core - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-chardev-spice - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-audio-spice - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ksm - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-opengl-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-virtio-vga - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-chardev-baum - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-s390x - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-s390x-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-skiboot - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-SLOF - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-virtio-gpu-pci - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-ui-spice-core-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-qxl-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-virtio-gpu - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-hw-display-qxl - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1
qemu-system-aarch64 - update to 6.2.0-41
qemu-system-arm - update to 6.2.0-41
qemu-hw-usb-host - update to 6.2.0-41
qemu-system-riscv - update to 6.2.0-41
qemu-system-x86_64 - update to 6.2.0-41
qemu-kvm-block-ssh - update to 6.2.0-41.0.1
qemu-kvm-ui-spice - update to 6.2.0-41.0.1
qemu-kvm-common - update to 6.2.0-41.0.1
qemu-kvm-block-rbd - update to 6.2.0-41.0.1
qemu-kvm-block-iscsi - update to 6.2.0-41.0.1
qemu-kvm-block-curl - update to 6.2.0-41.0.1
qemu-kvm - update to 6.2.0-41.0.1
qemu-img - update to 6.2.0-41.0.1
qemu-guest-agent - update to 6.2.0-41.0.1
qemu-kvm-core - update to 6.2.0-41.0.1
qemu-kvm-docs - update to 6.2.0-41.0.1
qemu-kvm-tests - update to 6.2.0-41.0.1
qemu-kvm-block-gluster - update to 6.2.0-41.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-41.0.1
qemu-kvm-ui-opengl - update to 6.2.0-41.0.1
qemu-user-static - update to 6.2.0-41.0.1
qemu-block-gluster-debuginfo - update to 6.2.0-150400.37.23.1
qemu-accel-qtest - update to 6.2.0-150400.37.23.1
qemu-vhost-user-gpu - update to 6.2.0-150400.37.23.1
qemu-linux-user-debuginfo - update to 6.2.0-150400.37.23.1
qemu-extra - update to 6.2.0-150400.37.23.1
qemu-linux-user-debugsource - update to 6.2.0-150400.37.23.1
qemu-accel-tcg-x86 - update to 6.2.0-150400.37.23.1
qemu-hw-usb-host-debuginfo - update to 6.2.0-150400.37.23.1
qemu-ivshmem-tools - update to 6.2.0-150400.37.23.1
qemu-linux-user - update to 6.2.0-150400.37.23.1
qemu-block-gluster - update to 6.2.0-150400.37.23.1
qemu-block-dmg-debuginfo - update to 6.2.0-150400.37.23.1
qemu-hw-usb-smartcard - update to 6.2.0-150400.37.23.1
qemu-hw-usb-host - update to 6.2.0-150400.37.23.1
qemu-accel-tcg-x86-debuginfo - update to 6.2.0-150400.37.23.1
qemu-hw-usb-smartcard-debuginfo - update to 6.2.0-150400.37.23.1
qemu-block-dmg - update to 6.2.0-150400.37.23.1
qemu-ivshmem-tools-debuginfo - update to 6.2.0-150400.37.23.1
qemu-audio-jack-debuginfo - update to 6.2.0-150400.37.23.1
qemu-block-nfs-debuginfo - update to 6.2.0-150400.37.23.1
qemu-extra-debuginfo - update to 6.2.0-150400.37.23.1
qemu-accel-qtest-debuginfo - update to 6.2.0-150400.37.23.1
qemu-audio-jack - update to 6.2.0-150400.37.23.1
qemu-vhost-user-gpu-debuginfo - update to 6.2.0-150400.37.23.1
qemu-block-nfs - update to 6.2.0-150400.37.23.1
qemu-kvm (Red Hat package) - addressed in versions 7.0.0-13.el9, 8.0.0-16.el9_3
qemu-sgabios - addressed in versions 8-150100.80.51.5, 8-150200.79.1, 8-150300.127.3, 8-150400.37.23.1

External References

Related Security Bulletins