Use-after-free in QEMU - CVE-2022-1050

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU72308

Use-after-free in QEMU - CVE-2022-1050

Published: February 15, 2023


Vulnerability identifier: #VU72308
CSH Severity: High
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-1050
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a malicious guest to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in the QEMU implementation of VMWare's paravirtual RDMA device. A specially crafted driver on a malicious guest can execute HW commands when shared buffers are not yet allocated, trigger a use-after-free error and execute arbitrary code on the QEMU host.



Affected software

QEMU
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Ubuntu
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Server Applications Module
Basesystem Module
openSUSE Leap
openEuler
qemu-system-aarch64 (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu (Ubuntu package)
qemu-system-common (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-kvm (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-guest-agent (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-common (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-ipxe
qemu-seabios
qemu-vgabios
qemu-block-iscsi
qemu-block-curl-debuginfo
qemu-ui-gtk-debuginfo
qemu-ui-sdl-debuginfo
qemu-audio-pa-debuginfo
qemu-block-curl
qemu-guest-agent
qemu-audio-sdl-debuginfo
qemu-debugsource
qemu-audio-alsa-debuginfo
qemu
qemu-block-ssh
qemu-block-rbd-debuginfo
qemu-audio-oss-debuginfo
qemu-audio-oss
qemu-block-ssh-debuginfo
qemu-audio-sdl
qemu-audio-alsa
qemu-s390
qemu-x86
qemu-ppc
qemu-ppc-debuginfo
qemu-s390-debuginfo
qemu-arm
qemu-arm-debuginfo
qemu-tools-debuginfo
qemu-block-iscsi-debuginfo
qemu-tools
qemu-block-rbd
qemu-lang
qemu-ui-gtk
qemu-ui-curses-debuginfo
qemu-ui-sdl
qemu-audio-pa
qemu-ui-curses
qemu-kvm
qemu-guest-agent-debuginfo
qemu-x86-debuginfo
qemu-debuginfo
qemu-img
qemu-help
qemu-ui-spice-app-debuginfo
qemu-microvm
qemu-ui-spice-app
qemu-system-data (Ubuntu package)
qemu-system-gui (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
qemu-ui-spice-core
qemu-ui-opengl
qemu-chardev-spice-debuginfo
qemu-chardev-baum-debuginfo
qemu-chardev-baum
qemu-audio-spice
qemu-hw-display-virtio-vga
qemu-hw-display-qxl
qemu-hw-usb-redirect
qemu-hw-usb-redirect-debuginfo
qemu-ksm
qemu-chardev-spice
qemu-audio-spice-debuginfo
qemu-hw-display-virtio-vga-debuginfo
qemu-ui-spice-core-debuginfo
qemu-hw-display-qxl-debuginfo
qemu-ui-opengl-debuginfo
qemu-hw-display-virtio-gpu-debuginfo
qemu-s390x-debuginfo
qemu-hw-display-virtio-gpu
qemu-hw-s390x-virtio-gpu-ccw
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-s390x
qemu-skiboot
qemu-SLOF
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-system-arm
qemu-hw-usb-host
qemu-system-aarch64
qemu-system-x86_64
qemu-system-riscv
qemu-extra
qemu-block-dmg
qemu-accel-qtest-debuginfo
qemu-hw-usb-host-debuginfo
qemu-block-gluster-debuginfo
qemu-hw-usb-smartcard-debuginfo
qemu-ivshmem-tools
qemu-vhost-user-gpu-debuginfo
qemu-audio-jack
qemu-block-gluster
qemu-block-nfs-debuginfo
qemu-accel-tcg-x86
qemu-accel-tcg-x86-debuginfo
qemu-hw-usb-smartcard
qemu-accel-qtest
qemu-ivshmem-tools-debuginfo
qemu-linux-user-debugsource
qemu-audio-jack-debuginfo
qemu-block-nfs
qemu-vhost-user-gpu
qemu-extra-debuginfo
qemu-linux-user-debuginfo
qemu-block-dmg-debuginfo
qemu-linux-user
qemu-testsuite
qemu-system-xen (Ubuntu package)
app-emulation/qemu
qemu-sgabios
VMware Tanzu Operations Manager

How to mitigate CVE-2022-1050

Install updates from vendor's website.

qemu-system-aarch64 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
qemu-system-x86 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11
qemu-system-common (Ubuntu package) - addressed in versions Ubuntu Pro, 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-misc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-kvm (Ubuntu package) - addressed in versions Ubuntu Pro, 1:4.2-3ubuntu6.27
qemu-system-s390x (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-sparc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-guest-agent (Ubuntu package) - addressed in versions Ubuntu Pro, 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-arm (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-mips (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-common (Ubuntu package) - update to Ubuntu Pro
qemu-system-ppc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-ipxe - addressed in versions 1.0.0+-66.1, 1.0.0+-150100.80.51.5, 1.0.0+-150200.79.1, 1.0.0+-150300.121.2, 1.0.0+-150400.37.11.1
qemu-seabios - addressed in versions 1.12.0_0_ga698c89-66.1, 1.12.0_0_ga698c89-150100.80.51.5, 1.12.1+-150200.79.1, 1.14.0_0_g155821a-150300.121.2, 1.15.0_0_g2dd4b9b-150400.37.11.1
qemu-vgabios - addressed in versions 1.12.0_0_ga698c89-66.1, 1.12.0_0_ga698c89-150100.80.51.5, 1.12.1+-150200.79.1, 1.14.0_0_g155821a-150300.121.2, 1.15.0_0_g2dd4b9b-150400.37.11.1
VMware Tanzu Operations Manager - addressed in versions 2.10.59, 3.0.11
qemu-block-iscsi - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-block-curl-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-sdl-debuginfo - update to 3.1.1.1-66.1
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-block-curl - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-guest-agent - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-audio-sdl-debuginfo - update to 3.1.1.1-66.1
qemu-debugsource - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-block-ssh - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-block-rbd-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-audio-oss-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 6.2.0-150400.37.11.1
qemu-audio-oss - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5
qemu-block-ssh-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-audio-sdl - update to 3.1.1.1-66.1
qemu-audio-alsa - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-s390 - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1
qemu-x86 - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ppc - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-s390-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1
qemu-arm - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-arm-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-tools-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-tools - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-block-rbd - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-lang - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-gtk - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-sdl - update to 3.1.1.1-66.1
qemu-audio-pa - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-curses - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-kvm - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-guest-agent-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-x86-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-debuginfo - addressed in versions 4.1.0-73, 6.2.0-72
qemu - addressed in versions 4.1.0-73, 6.2.0-72
qemu-block-rbd - addressed in versions 4.1.0-73, 6.2.0-72
qemu-block-ssh - addressed in versions 4.1.0-73, 6.2.0-72
qemu-block-iscsi - addressed in versions 4.1.0-73, 6.2.0-72
qemu-img - addressed in versions 4.1.0-73, 6.2.0-72
qemu-debugsource - addressed in versions 4.1.0-73, 6.2.0-72
qemu-block-curl - addressed in versions 4.1.0-73, 6.2.0-72
qemu-guest-agent - addressed in versions 4.1.0-73, 6.2.0-72
qemu-seabios - addressed in versions 4.1.0-73, 6.2.0-72
qemu-help - addressed in versions 4.1.0-73, 6.2.0-72
qemu-ui-spice-app-debuginfo - addressed in versions 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-microvm - addressed in versions 4.2.1-150200.79.1, 6.2.0-150400.37.11.1
qemu-ui-spice-app - addressed in versions 4.2.1-150200.79.1, 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-system-data (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-gui (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-ui-spice-core - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-opengl - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-chardev-spice-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-chardev-baum-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-chardev-baum - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-audio-spice - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-virtio-vga - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-qxl - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-usb-redirect - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-usb-redirect-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ksm - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-chardev-spice - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-audio-spice-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-spice-core-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-qxl-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-ui-opengl-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-s390x-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-virtio-gpu - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-virtio-gpu-pci - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-s390x - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-skiboot - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-SLOF - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 5.2.0-150300.121.2, 6.2.0-150400.37.11.1
qemu-system-arm - update to 6.2.0-72
qemu-hw-usb-host - update to 6.2.0-72
qemu-system-aarch64 - update to 6.2.0-72
qemu-system-x86_64 - update to 6.2.0-72
qemu-system-riscv - update to 6.2.0-72
qemu-extra - update to 6.2.0-150400.37.11.1
qemu-block-dmg - update to 6.2.0-150400.37.11.1
qemu-accel-qtest-debuginfo - update to 6.2.0-150400.37.11.1
qemu-hw-usb-host-debuginfo - update to 6.2.0-150400.37.11.1
qemu-block-gluster-debuginfo - update to 6.2.0-150400.37.11.1
qemu-hw-usb-smartcard-debuginfo - update to 6.2.0-150400.37.11.1
qemu-ivshmem-tools - update to 6.2.0-150400.37.11.1
qemu-vhost-user-gpu-debuginfo - update to 6.2.0-150400.37.11.1
qemu-audio-jack - update to 6.2.0-150400.37.11.1
qemu-block-gluster - update to 6.2.0-150400.37.11.1
qemu-block-nfs-debuginfo - update to 6.2.0-150400.37.11.1
qemu-accel-tcg-x86 - update to 6.2.0-150400.37.11.1
qemu-accel-tcg-x86-debuginfo - update to 6.2.0-150400.37.11.1
qemu-hw-usb-host - update to 6.2.0-150400.37.11.1
qemu-hw-usb-smartcard - update to 6.2.0-150400.37.11.1
qemu-accel-qtest - update to 6.2.0-150400.37.11.1
qemu-ivshmem-tools-debuginfo - update to 6.2.0-150400.37.11.1
qemu-linux-user-debugsource - update to 6.2.0-150400.37.11.1
qemu-audio-jack-debuginfo - update to 6.2.0-150400.37.11.1
qemu-block-nfs - update to 6.2.0-150400.37.11.1
qemu-vhost-user-gpu - update to 6.2.0-150400.37.11.1
qemu-extra-debuginfo - update to 6.2.0-150400.37.11.1
qemu-linux-user-debuginfo - update to 6.2.0-150400.37.11.1
qemu-block-dmg-debuginfo - update to 6.2.0-150400.37.11.1
qemu-linux-user - update to 6.2.0-150400.37.11.1
qemu-testsuite - update to 6.2.0-150400.37.11.2
qemu-system-xen (Ubuntu package) - addressed in versions 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
app-emulation/qemu - update to 8.0.0
qemu-sgabios - addressed in versions 8-66.1, 8-150100.80.51.5, 8-150200.79.1, 8-150300.121.2, 8-150400.37.11.1

External References

Related Security Bulletins