Double free in QEMU - CVE-2024-3446

 

Double free in QEMU - CVE-2024-3446

Published: April 29, 2024


Vulnerability identifier: #VU89047
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-3446
CWE-ID: CWE-415
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a malicious guest to escalate privileges on the system.

The vulnerability exists due to a boundary error in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. A malicious guest can trigger a double free error and execute arbitrary code within the context of the QEMU process on the host.


Affected software

QEMU
Oracle Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Micro
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Anolis OS
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
SUSE Package Hub 15
Server Applications Module
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
netcf-libs
netcf-devel
netcf
swtpm
swtpm-devel
swtpm-tools-pkcs11
swtpm-libs
swtpm-tools
libtpms
libtpms-devel
sgabios
sgabios-bin
qemu-ipxe
libvirt-dbus
ocaml-hivex
ocaml-hivex-devel
ruby-hivex
python3-hivex
perl-hivex
hivex
hivex-devel
ocaml-libnbd-devel
nbdfuse
libnbd-devel
libnbd
python3-libnbd
libnbd-bash-completion
ocaml-libnbd
qemu-seabios
qemu-vgabios
seabios
seavgabios-bin
seabios-bin
libiscsi-utils
libiscsi-devel
libiscsi
nbdkit-bash-completion
nbdkit-xz-filter
nbdkit-tmpdisk-plugin
nbdkit-tar-plugin
nbdkit-server
nbdkit-python-plugin
nbdkit-nbd-plugin
nbdkit-ssh-plugin
nbdkit-linuxdisk-plugin
nbdkit-gzip-plugin
nbdkit-gzip-filter
nbdkit-vddk-plugin
nbdkit-tar-filter
nbdkit
nbdkit-basic-filters
nbdkit-basic-plugins
nbdkit-curl-plugin
nbdkit-devel
nbdkit-example-plugins
virt-v2v
virt-v2v-man-pages-uk
virt-v2v-man-pages-ja
virt-v2v-bash-completion
lua-guestfs
ocaml-libguestfs-devel
ocaml-libguestfs
libguestfs-tools
libguestfs-man-pages-uk
libguestfs-man-pages-ja
virt-dib
libguestfs-javadoc
libguestfs-inspect-icons
libguestfs-bash-completion
libguestfs
libguestfs-gfs2
libguestfs-devel
libguestfs-appliance
libguestfs-gobject
libguestfs-gobject-devel
libguestfs-java
libguestfs-java-devel
libguestfs-rescue
python3-libguestfs
libguestfs-rsync
libguestfs-tools-c
perl-Sys-Guestfs
libguestfs-xfs
ruby-libguestfs
qemu
qemu-block-rbd
qemu-block-curl
qemu-debugsource
qemu-debuginfo
qemu-guest-agent
qemu-block-iscsi
qemu-help
qemu-img
qemu-block-ssh
supermin-devel
supermin
qemu (Ubuntu package)
qemu-kvm-ui-spice
qemu-kvm
qemu-kvm-block-curl
qemu-kvm-block-iscsi
qemu-kvm-block-rbd
qemu-kvm-block-ssh
qemu-kvm-common
qemu-kvm-core
qemu-kvm-docs
qemu-kvm-tests
qemu-kvm-block-gluster
qemu-kvm-hw-usbredir
qemu-kvm-ui-opengl
qemu-user-static
qemu-system-aarch64
qemu-system-x86_64
qemu-system-arm
qemu-hw-usb-host
qemu-system-riscv
qemu-audio-oss
qemu-audio-alsa
qemu-accel-tcg-x86
qemu-x86
qemu-extra-debuginfo
qemu-block-nfs
qemu-hw-s390x-virtio-gpu-ccw
qemu-vhost-user-gpu-debuginfo
qemu-hw-usb-host-debuginfo
qemu-accel-qtest
qemu-ppc
qemu-lang
qemu-headless
qemu-block-iscsi-debuginfo
qemu-ui-opengl
qemu-block-nfs-debuginfo
qemu-audio-pa
qemu-linux-user-debuginfo
qemu-block-gluster
qemu-hw-display-qxl-debuginfo
qemu-ksm
qemu-block-gluster-debuginfo
qemu-guest-agent-debuginfo
qemu-audio-jack
qemu-audio-alsa-debuginfo
qemu-audio-jack-debuginfo
qemu-chardev-spice
qemu-chardev-spice-debuginfo
qemu-accel-qtest-debuginfo
qemu-ui-gtk-debuginfo
qemu-ui-spice-core-debuginfo
qemu-hw-display-virtio-gpu-pci
qemu-accel-tcg-x86-debuginfo
qemu-ppc-debuginfo
qemu-tools
qemu-chardev-baum-debuginfo
qemu-audio-dbus-debuginfo
qemu-ivshmem-tools-debuginfo
qemu-s390x-debuginfo
qemu-hw-display-virtio-gpu
qemu-block-curl-debuginfo
qemu-arm
qemu-audio-pa-debuginfo
qemu-ui-spice-app
qemu-ui-dbus-debuginfo
qemu-hw-display-virtio-vga
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-s390x
qemu-ui-spice-app-debuginfo
qemu-audio-dbus
qemu-block-dmg-debuginfo
qemu-vhost-user-gpu
qemu-hw-usb-redirect
qemu-ivshmem-tools
qemu-hw-display-qxl
qemu-block-ssh-debuginfo
qemu-hw-usb-smartcard-debuginfo
qemu-audio-spice
qemu-audio-oss-debuginfo
qemu-linux-user-debugsource
qemu-block-dmg
qemu-hw-usb-smartcard
qemu-ui-spice-core
qemu-hw-display-virtio-gpu-debuginfo
qemu-ui-gtk
qemu-ui-curses
qemu-extra
qemu-ui-curses-debuginfo
qemu-linux-user
qemu-tools-debuginfo
qemu-ui-dbus
qemu-x86-debuginfo
qemu-hw-usb-redirect-debuginfo
qemu-chardev-baum
qemu-arm-debuginfo
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-hw-display-virtio-vga-debuginfo
qemu-audio-spice-debuginfo
qemu-ui-opengl-debuginfo
qemu-block-rbd-debuginfo
qemu-microvm
qemu-SLOF
qemu-skiboot
perl-Sys-Virt
python3-libvirt
libvirt-daemon-driver-storage-rbd
libvirt-nss
libvirt
libvirt-client
libvirt-daemon
libvirt-daemon-config-network
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-interface
libvirt-daemon-driver-network
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-qemu
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-mpath
libvirt-daemon-driver-storage-scsi
libvirt-daemon-kvm
libvirt-devel
libvirt-docs
libvirt-libs
libvirt-lock-sanlock
libvirt-wireshark
qemu-char-baum
qemu-docs
qemu-device-usb-smartcard
qemu-device-usb-redirect
qemu-device-usb-host
qemu-device-display-virtio-vga-gl
qemu-device-display-virtio-vga
qemu-device-display-virtio-gpu-pci
qemu-device-display-virtio-gpu-ccw
qemu-device-display-virtio-gpu
qemu-device-display-qxl
qemu-common
qemu-char-spice
qemu-user-binfmt
qemu-user
qemu-ui-egl-headless
qemu-tests
qemu-system-x86-core
qemu-system-riscv-core
qemu-system-x86
qemu-pr-helper
qemu-system-aarch64-core
qemu-system-arm-core
qemu-system-loongarch64
qemu-system-loongarch64-core
libguestfs-winsupport
qemu-sgabios
qemu-kvm (Red Hat package)

How to mitigate CVE-2024-3446

Install updates from vendor's website.

netcf-libs - update to 0.2.8-12.0.1
netcf-devel - update to 0.2.8-12.0.1
netcf - update to 0.2.8-12.0.1
swtpm - update to 0.7.0-4.20211109gitb79fd91
swtpm-devel - update to 0.7.0-4.20211109gitb79fd91
swtpm-tools-pkcs11 - update to 0.7.0-4.20211109gitb79fd91
swtpm-libs - update to 0.7.0-4.20211109gitb79fd91
swtpm-tools - update to 0.7.0-4.20211109gitb79fd91
libtpms - update to 0.9.1-2.20211126git1ff6fe1f43
libtpms-devel - update to 0.9.1-2.20211126git1ff6fe1f43
sgabios - update to 0.20170427git-3
sgabios-bin - update to 0.20170427git-3
qemu-ipxe - update to 1.0.0+-150500.49.15.1
libvirt-dbus - update to 1.3.0-2
ocaml-hivex - update to 1.3.18-23
ocaml-hivex-devel - update to 1.3.18-23
ruby-hivex - update to 1.3.18-23
python3-hivex - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
hivex - update to 1.3.18-23
hivex-devel - update to 1.3.18-23
ocaml-libnbd-devel - update to 1.6.0-6.0.1
nbdfuse - update to 1.6.0-6.0.1
libnbd-devel - update to 1.6.0-6.0.1
libnbd - update to 1.6.0-6.0.1
python3-libnbd - update to 1.6.0-6.0.1
libnbd-bash-completion - update to 1.6.0-6.0.1
ocaml-libnbd - update to 1.6.0-6.0.1
qemu-seabios - update to 1.16.0_0_gd239552-150500.49.15.1
qemu-vgabios - update to 1.16.0_0_gd239552-150500.49.15.1
seabios - update to 1.16.0-4
seavgabios-bin - update to 1.16.0-4
seabios-bin - update to 1.16.0-4
libiscsi-utils - update to 1.18.0-8.0.1
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi - update to 1.18.0-8.0.1
nbdkit-bash-completion - update to 1.24.0-5
nbdkit-xz-filter - update to 1.24.0-5
nbdkit-tmpdisk-plugin - update to 1.24.0-5
nbdkit-tar-plugin - update to 1.24.0-5
nbdkit-server - update to 1.24.0-5
nbdkit-python-plugin - update to 1.24.0-5
nbdkit-nbd-plugin - update to 1.24.0-5
nbdkit-ssh-plugin - update to 1.24.0-5
nbdkit-linuxdisk-plugin - update to 1.24.0-5
nbdkit-gzip-plugin - update to 1.24.0-5
nbdkit-gzip-filter - update to 1.24.0-5
nbdkit-vddk-plugin - update to 1.24.0-5
nbdkit-tar-filter - update to 1.24.0-5
nbdkit - update to 1.24.0-5
nbdkit-basic-filters - update to 1.24.0-5
nbdkit-basic-plugins - update to 1.24.0-5
nbdkit-curl-plugin - update to 1.24.0-5
nbdkit-devel - update to 1.24.0-5
nbdkit-example-plugins - update to 1.24.0-5
virt-v2v - update to 1.42.0-22
virt-v2v-man-pages-uk - update to 1.42.0-22
virt-v2v-man-pages-ja - update to 1.42.0-22
virt-v2v-bash-completion - update to 1.42.0-22
lua-guestfs - update to 1.44.0-9.0.1
ocaml-libguestfs-devel - update to 1.44.0-9.0.1
ocaml-libguestfs - update to 1.44.0-9.0.1
libguestfs-tools - update to 1.44.0-9.0.1
libguestfs-man-pages-uk - update to 1.44.0-9.0.1
libguestfs-man-pages-ja - update to 1.44.0-9.0.1
virt-dib - update to 1.44.0-9.0.1
libguestfs-javadoc - update to 1.44.0-9.0.1
libguestfs-inspect-icons - update to 1.44.0-9.0.1
libguestfs-bash-completion - update to 1.44.0-9.0.1
libguestfs - update to 1.44.0-9.0.1
libguestfs-gfs2 - update to 1.44.0-9.0.1
libguestfs-devel - update to 1.44.0-9.0.1
libguestfs-appliance - update to 1.44.0-9.0.1
libguestfs-gobject - update to 1.44.0-9.0.1
libguestfs-gobject-devel - update to 1.44.0-9.0.1
libguestfs-java - update to 1.44.0-9.0.1
libguestfs-java-devel - update to 1.44.0-9.0.1
libguestfs-rescue - update to 1.44.0-9.0.1
python3-libguestfs - update to 1.44.0-9.0.1
libguestfs-rsync - update to 1.44.0-9.0.1
libguestfs-tools-c - update to 1.44.0-9.0.1
perl-Sys-Guestfs - update to 1.44.0-9.0.1
libguestfs-xfs - update to 1.44.0-9.0.1
ruby-libguestfs - update to 1.44.0-9.0.1
qemu - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-block-rbd - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-block-curl - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-debugsource - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-debuginfo - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-guest-agent - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-block-iscsi - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-seabios - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-help - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-img - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
qemu-block-ssh - addressed in versions 4.1.0-79, 4.1.0-83, 6.2.0-88, 6.2.0-91
supermin-devel - update to 5.2.1-2.0.2
supermin - update to 5.2.1-2.0.2
qemu (Ubuntu package) - addressed in versions 1:6.2+dfsg-2ubuntu6.27, 1:8.2.2+ds-0ubuntu1.10, 1:9.2.1+ds-1ubuntu5.2
qemu-kvm-ui-spice - update to 6.2.0-53.0.1
qemu-guest-agent - addressed in versions 6.2.0-53.0.1, 8.2.0-15, 8.2.0-33
qemu-img - addressed in versions 6.2.0-53.0.1, 8.2.0-15, 8.2.0-33
qemu-kvm - addressed in versions 6.2.0-53.0.1, 8.2.0-15, 8.2.0-33
qemu-kvm-block-curl - update to 6.2.0-53.0.1
qemu-kvm-block-iscsi - update to 6.2.0-53.0.1
qemu-kvm-block-rbd - update to 6.2.0-53.0.1
qemu-kvm-block-ssh - update to 6.2.0-53.0.1
qemu-kvm-common - update to 6.2.0-53.0.1
qemu-kvm-core - addressed in versions 6.2.0-53.0.1, 8.2.0-15, 8.2.0-33
qemu-kvm-docs - update to 6.2.0-53.0.1
qemu-kvm-tests - update to 6.2.0-53.0.1
qemu-kvm-block-gluster - update to 6.2.0-53.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-53.0.1
qemu-kvm-ui-opengl - update to 6.2.0-53.0.1
qemu-user-static - update to 6.2.0-53.0.1
qemu-system-aarch64 - addressed in versions 6.2.0-88, 6.2.0-91
qemu-system-x86_64 - addressed in versions 6.2.0-88, 6.2.0-91
qemu-system-arm - addressed in versions 6.2.0-88, 6.2.0-91
qemu-hw-usb-host - addressed in versions 6.2.0-88, 6.2.0-91
qemu-system-riscv - addressed in versions 6.2.0-88, 6.2.0-91
qemu-audio-oss - update to 7.1.0-150500.49.15.1
qemu-audio-alsa - update to 7.1.0-150500.49.15.1
qemu-accel-tcg-x86 - update to 7.1.0-150500.49.15.1
qemu-x86 - update to 7.1.0-150500.49.15.1
qemu-extra-debuginfo - update to 7.1.0-150500.49.15.1
qemu-block-nfs - update to 7.1.0-150500.49.15.1
qemu-hw-s390x-virtio-gpu-ccw - update to 7.1.0-150500.49.15.1
qemu-vhost-user-gpu-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-usb-host-debuginfo - update to 7.1.0-150500.49.15.1
qemu-accel-qtest - update to 7.1.0-150500.49.15.1
qemu-ppc - update to 7.1.0-150500.49.15.1
qemu-lang - update to 7.1.0-150500.49.15.1
qemu-headless - update to 7.1.0-150500.49.15.1
qemu-guest-agent - update to 7.1.0-150500.49.15.1
qemu-debugsource - update to 7.1.0-150500.49.15.1
qemu-block-iscsi-debuginfo - update to 7.1.0-150500.49.15.1
qemu-ui-opengl - update to 7.1.0-150500.49.15.1
qemu-block-nfs-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-pa - update to 7.1.0-150500.49.15.1
qemu-block-ssh - update to 7.1.0-150500.49.15.1
qemu-linux-user-debuginfo - update to 7.1.0-150500.49.15.1
qemu-block-gluster - update to 7.1.0-150500.49.15.1
qemu-hw-display-qxl-debuginfo - update to 7.1.0-150500.49.15.1
qemu-ksm - update to 7.1.0-150500.49.15.1
qemu-block-gluster-debuginfo - update to 7.1.0-150500.49.15.1
qemu-guest-agent-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-jack - update to 7.1.0-150500.49.15.1
qemu-audio-alsa-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-jack-debuginfo - update to 7.1.0-150500.49.15.1
qemu-chardev-spice - update to 7.1.0-150500.49.15.1
qemu-chardev-spice-debuginfo - update to 7.1.0-150500.49.15.1
qemu-accel-qtest-debuginfo - update to 7.1.0-150500.49.15.1
qemu-block-iscsi - update to 7.1.0-150500.49.15.1
qemu-ui-gtk-debuginfo - update to 7.1.0-150500.49.15.1
qemu - update to 7.1.0-150500.49.15.1
qemu-ui-spice-core-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-display-virtio-gpu-pci - update to 7.1.0-150500.49.15.1
qemu-accel-tcg-x86-debuginfo - update to 7.1.0-150500.49.15.1
qemu-ppc-debuginfo - update to 7.1.0-150500.49.15.1
qemu-tools - update to 7.1.0-150500.49.15.1
qemu-chardev-baum-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-dbus-debuginfo - update to 7.1.0-150500.49.15.1
qemu-ivshmem-tools-debuginfo - update to 7.1.0-150500.49.15.1
qemu-s390x-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-display-virtio-gpu - update to 7.1.0-150500.49.15.1
qemu-block-curl-debuginfo - update to 7.1.0-150500.49.15.1
qemu-arm - update to 7.1.0-150500.49.15.1
qemu-audio-pa-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-usb-host - update to 7.1.0-150500.49.15.1
qemu-ui-spice-app - update to 7.1.0-150500.49.15.1
qemu-ui-dbus-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-display-virtio-vga - update to 7.1.0-150500.49.15.1
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - update to 7.1.0-150500.49.15.1
qemu-s390x - update to 7.1.0-150500.49.15.1
qemu-ui-spice-app-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-dbus - update to 7.1.0-150500.49.15.1
qemu-block-dmg-debuginfo - update to 7.1.0-150500.49.15.1
qemu-vhost-user-gpu - update to 7.1.0-150500.49.15.1
qemu-hw-usb-redirect - update to 7.1.0-150500.49.15.1
qemu-ivshmem-tools - update to 7.1.0-150500.49.15.1
qemu-kvm - update to 7.1.0-150500.49.15.1
qemu-hw-display-qxl - update to 7.1.0-150500.49.15.1
qemu-block-ssh-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-usb-smartcard-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-spice - update to 7.1.0-150500.49.15.1
qemu-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-oss-debuginfo - update to 7.1.0-150500.49.15.1
qemu-linux-user-debugsource - update to 7.1.0-150500.49.15.1
qemu-block-dmg - update to 7.1.0-150500.49.15.1
qemu-hw-usb-smartcard - update to 7.1.0-150500.49.15.1
qemu-ui-spice-core - update to 7.1.0-150500.49.15.1
qemu-hw-display-virtio-gpu-debuginfo - update to 7.1.0-150500.49.15.1
qemu-ui-gtk - update to 7.1.0-150500.49.15.1
qemu-ui-curses - update to 7.1.0-150500.49.15.1
qemu-extra - update to 7.1.0-150500.49.15.1
qemu-ui-curses-debuginfo - update to 7.1.0-150500.49.15.1
qemu-linux-user - update to 7.1.0-150500.49.15.1
qemu-tools-debuginfo - update to 7.1.0-150500.49.15.1
qemu-ui-dbus - update to 7.1.0-150500.49.15.1
qemu-x86-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-usb-redirect-debuginfo - update to 7.1.0-150500.49.15.1
qemu-chardev-baum - update to 7.1.0-150500.49.15.1
qemu-arm-debuginfo - update to 7.1.0-150500.49.15.1
qemu-block-curl - update to 7.1.0-150500.49.15.1
qemu-hw-display-virtio-gpu-pci-debuginfo - update to 7.1.0-150500.49.15.1
qemu-hw-display-virtio-vga-debuginfo - update to 7.1.0-150500.49.15.1
qemu-audio-spice-debuginfo - update to 7.1.0-150500.49.15.1
qemu-ui-opengl-debuginfo - update to 7.1.0-150500.49.15.1
qemu-block-rbd - update to 7.1.0-150500.49.15.1
qemu-block-rbd-debuginfo - update to 7.1.0-150500.49.15.1
qemu-microvm - update to 7.1.0-150500.49.15.1
qemu-SLOF - update to 7.1.0-150500.49.15.1
qemu-skiboot - update to 7.1.0-150500.49.15.1
perl-Sys-Virt - update to 8.0.0-1
python3-libvirt - update to 8.0.0-2
libvirt-daemon-driver-storage-rbd - update to 8.0.0-23.2.0.2
libvirt-nss - update to 8.0.0-23.2.0.2
libvirt - update to 8.0.0-23.2.0.2
libvirt-client - update to 8.0.0-23.2.0.2
libvirt-daemon - update to 8.0.0-23.2.0.2
libvirt-daemon-config-network - update to 8.0.0-23.2.0.2
libvirt-daemon-config-nwfilter - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-interface - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-network - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-nodedev - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-nwfilter - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-qemu - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-secret - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-core - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-disk - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-gluster - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-logical - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-mpath - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-scsi - update to 8.0.0-23.2.0.2
libvirt-daemon-kvm - update to 8.0.0-23.2.0.2
libvirt-devel - update to 8.0.0-23.2.0.2
libvirt-docs - update to 8.0.0-23.2.0.2
libvirt-libs - update to 8.0.0-23.2.0.2
libvirt-lock-sanlock - update to 8.0.0-23.2.0.2
libvirt-wireshark - update to 8.0.0-23.2.0.2
qemu-char-baum - addressed in versions 8.2.0-15, 8.2.0-33
qemu-docs - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-usb-smartcard - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-usb-redirect - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-usb-host - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-display-virtio-vga-gl - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-display-virtio-vga - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-display-virtio-gpu-pci - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-display-virtio-gpu-ccw - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-display-virtio-gpu - addressed in versions 8.2.0-15, 8.2.0-33
qemu-device-display-qxl - addressed in versions 8.2.0-15, 8.2.0-33
qemu-common - addressed in versions 8.2.0-15, 8.2.0-33
qemu-char-spice - addressed in versions 8.2.0-15, 8.2.0-33
qemu-user-binfmt - addressed in versions 8.2.0-15, 8.2.0-33
qemu-block-ssh - addressed in versions 8.2.0-15, 8.2.0-33
qemu-block-iscsi - addressed in versions 8.2.0-15, 8.2.0-33
qemu-block-gluster - addressed in versions 8.2.0-15, 8.2.0-33
qemu-block-dmg - addressed in versions 8.2.0-15, 8.2.0-33
qemu-block-curl - addressed in versions 8.2.0-15, 8.2.0-33
qemu-audio-spice - addressed in versions 8.2.0-15, 8.2.0-33
qemu-audio-pa - addressed in versions 8.2.0-15, 8.2.0-33
qemu-audio-oss - addressed in versions 8.2.0-15, 8.2.0-33
qemu-audio-dbus - addressed in versions 8.2.0-15, 8.2.0-33
qemu-audio-alsa - addressed in versions 8.2.0-15, 8.2.0-33
qemu - addressed in versions 8.2.0-15, 8.2.0-33
qemu-user - addressed in versions 8.2.0-15, 8.2.0-33
qemu-ui-spice-core - addressed in versions 8.2.0-15, 8.2.0-33
qemu-ui-spice-app - addressed in versions 8.2.0-15, 8.2.0-33
qemu-ui-opengl - addressed in versions 8.2.0-15, 8.2.0-33
qemu-ui-gtk - addressed in versions 8.2.0-15, 8.2.0-33
qemu-ui-egl-headless - addressed in versions 8.2.0-15, 8.2.0-33
qemu-ui-dbus - addressed in versions 8.2.0-15, 8.2.0-33
qemu-ui-curses - addressed in versions 8.2.0-15, 8.2.0-33
qemu-tools - addressed in versions 8.2.0-15, 8.2.0-33
qemu-tests - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-x86-core - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-riscv-core - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-x86 - addressed in versions 8.2.0-15, 8.2.0-33
qemu-pr-helper - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-aarch64 - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-aarch64-core - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-arm - update to 8.2.0-15
qemu-system-arm-core - update to 8.2.0-15
qemu-system-loongarch64 - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-loongarch64-core - addressed in versions 8.2.0-15, 8.2.0-33
qemu-system-riscv - addressed in versions 8.2.0-15, 8.2.0-33
qemu-block-rbd - update to 8.2.0-33
libguestfs-winsupport - update to 8.10-1
qemu-sgabios - update to 8-150500.49.15.1
qemu-kvm (Red Hat package) - update to 9.0.0-10.el9_5

External References

Related Security Bulletins