Skip to content
OpenAdvisories
Medium ALSA-2022:1759 30 CVEs

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Published May 10, 2022 · Updated Oct 31, 2026

Ecosystem: AlmaLinux

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0), libvirt (8.0.0), libvirt-python (8.0.0), perl-Sys-Virt (8.0.0), seabios (1.15.0), libtpms (0.9.1). (BZ#1997410, BZ#2012802, BZ#2012806, BZ#2012813, BZ#2018392, BZ#2027716, BZ#2029355)

Security Fix(es):

* QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)

* ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)

* ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes (CVE-2021-33287)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)

* ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections (CVE-2021-35267)

* ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode (CVE-2021-35268)

* ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT (CVE-2021-35269)

* ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() (CVE-2021-39251)

* ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)

* ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)

* ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize() (CVE-2021-39254)

* ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute (CVE-2021-39255)

* ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() (CVE-2021-39256)

* ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap (CVE-2021-39257)

* ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() (CVE-2021-39258)

* ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length (CVE-2021-39259)

* ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() (CVE-2021-39260)

* ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)

* ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)

* ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute (CVE-2021-39263)

* libnbd: nbdcopy: missing error handling may create corrupted destination image (CVE-2022-0485)

* hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622)

* nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)

* libvirt: segmentation fault during VM shutdown can lead to vdsm hang (CVE-2021-3975)

* QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c (CVE-2021-4145)

* QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158)

* QEMU: block: fdc: null pointer dereference may lead to guest crash (CVE-2021-20196)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 130

ReleasePackageFixed in
AlmaLinux · 8 hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 hivex-devel 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libguestfs 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-appliance 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-bash-completion 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-devel 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-gfs2 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-gobject 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-gobject-devel 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-inspect-icons 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-java 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-java-devel 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-javadoc 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-man-pages-ja 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-man-pages-uk 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-rescue 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-rsync 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-tools 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-tools-c 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libguestfs-winsupport 8.6-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libguestfs-xfs 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libnbd 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libnbd-bash-completion 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libnbd-devel 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libtpms 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libtpms-devel 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-client 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-config-network 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-config-nwfilter 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-interface 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-network 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-nodedev 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-nwfilter 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-qemu 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-secret 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-core 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-disk 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-gluster 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi-direct 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-logical 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-mpath 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-rbd 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-driver-storage-scsi 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-daemon-kvm 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-devel 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-docs 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-libs 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-lock-sanlock 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-nss 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-wireshark 8.0.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 lua-guestfs 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 nbdfuse 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-bash-completion 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-basic-filters 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-basic-plugins 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-curl-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-devel 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-example-plugins 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-gzip-filter 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-gzip-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-linuxdisk-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-nbd-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-python-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-server 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-ssh-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-tar-filter 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-tar-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-tmpdisk-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-vddk-plugin 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit-xz-filter 1.24.0-4.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-hivex-devel 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-libguestfs 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 ocaml-libguestfs-devel 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 ocaml-libnbd 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-libnbd-devel 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 perl-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 perl-Sys-Guestfs 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 perl-Sys-Virt 8.0.0-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 python3-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 python3-libguestfs 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 python3-libnbd 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 python3-libvirt 8.0.0-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-guest-agent 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-img 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-block-curl 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-block-gluster 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-block-iscsi 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-block-rbd 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-block-ssh 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-common 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-core 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-docs 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-hw-usbredir 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-tests 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-ui-opengl 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 qemu-kvm-ui-spice 15:6.2.0-11.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ruby-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ruby-libguestfs 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 seabios 1.15.0-2.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 seabios-bin 1.15.0-2.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 seavgabios-bin 1.15.0-2.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 sgabios 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 sgabios-bin 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 SLOF 20210217-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 supermin 5.2.1-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 supermin-devel 5.2.1-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 swtpm 0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 swtpm-devel 0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 swtpm-libs 0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 swtpm-tools 0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 swtpm-tools-pkcs11 0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 virt-dib 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
AlmaLinux · 8 virt-v2v 1:1.42.0-18.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 virt-v2v-bash-completion 1:1.42.0-18.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 virt-v2v-man-pages-ja 1:1.42.0-18.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 virt-v2v-man-pages-uk 1:1.42.0-18.module_el8.6.0+2880+7d9e3703

Vulnerabilities 30

References

  • report
    https://bugzilla.redhat.com/1510237
  • report
    https://bugzilla.redhat.com/1677608
  • report
    https://bugzilla.redhat.com/1689202
  • report
    https://bugzilla.redhat.com/1738392
  • report
    https://bugzilla.redhat.com/1743098
  • report
    https://bugzilla.redhat.com/1806857
  • report
    https://bugzilla.redhat.com/1810863
  • report
    https://bugzilla.redhat.com/1836094
  • report
    https://bugzilla.redhat.com/1845468
  • report
    https://bugzilla.redhat.com/1852762
  • report
    https://bugzilla.redhat.com/1867087
  • report
    https://bugzilla.redhat.com/1919210
  • report
    https://bugzilla.redhat.com/1924972
  • report
    https://bugzilla.redhat.com/1926508
  • report
    https://bugzilla.redhat.com/1942275
  • report
    https://bugzilla.redhat.com/1943203
  • report
    https://bugzilla.redhat.com/1953389
  • report
    https://bugzilla.redhat.com/1965140
  • report
    https://bugzilla.redhat.com/1965589
  • report
    https://bugzilla.redhat.com/1965638
  • report
    https://bugzilla.redhat.com/1972515
  • report
    https://bugzilla.redhat.com/1975489
  • report
    https://bugzilla.redhat.com/1975840
  • report
    https://bugzilla.redhat.com/1978574
  • report
    https://bugzilla.redhat.com/1981782
  • report
    https://bugzilla.redhat.com/1982993
  • report
    https://bugzilla.redhat.com/1983684
  • report
    https://bugzilla.redhat.com/1984721
  • report
    https://bugzilla.redhat.com/1985451
  • report
    https://bugzilla.redhat.com/1988104
  • report
    https://bugzilla.redhat.com/1988986
  • report
    https://bugzilla.redhat.com/1989338
  • report
    https://bugzilla.redhat.com/1989520
  • report
    https://bugzilla.redhat.com/1990135
  • report
    https://bugzilla.redhat.com/1994695
  • report
    https://bugzilla.redhat.com/1995865
  • report
    https://bugzilla.redhat.com/1996530
  • report
    https://bugzilla.redhat.com/1997410
  • report
    https://bugzilla.redhat.com/1998514