Summary
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized
systems.
Security Fix(es):
* QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 (CVE-2022-0358)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libiscsi | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | libiscsi-devel | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | libiscsi-utils | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | libvirt-dbus | 1.3.0-2.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | netcf | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | netcf-devel | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | netcf-libs | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | qemu-guest-agent | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-img | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm-block-curl | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm-block-gluster | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm-block-iscsi | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm-block-rbd | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm-block-ssh | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm-common | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | qemu-kvm-core | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| AlmaLinux · 8 | sgabios | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux · 8 | sgabios-bin | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
Vulnerabilities 2
-
Unscored —CVE-2018-13405 Public exploit
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…
-
Unscored —
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly rela…
References
-
report
https://vulners.com/cve/CVE-2022-0358