Skip to content
OpenAdvisories
Medium ALSA-2022:5263 2 CVEs

Moderate: qemu-kvm security and bug fix update

Published Jul 1, 2022 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.
Security Fix(es):
* QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353)
* QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* AlmaLinux 9.0 guest with vsock device migration failed from AlmaLinux 9.0 > AlmaLinux 8.6 (BZ#2071102)

Fixed packages 22

ReleasePackageFixed in
AlmaLinux · 9 qemu-guest-agent 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-img 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-audio-pa 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-block-curl 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-block-rbd 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-common 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-core 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-display-virtio-gpu 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-display-virtio-gpu-ccw 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-display-virtio-gpu-gl 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-display-virtio-gpu-pci 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-display-virtio-gpu-pci-gl 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-display-virtio-vga 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-display-virtio-vga-gl 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-usb-host 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-device-usb-redirect 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-docs 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-tools 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-ui-egl-headless 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-kvm-ui-opengl 17:6.2.0-11.el9_0.3
AlmaLinux · 9 qemu-pr-helper 17:6.2.0-11.el9_0.3

Vulnerabilities 2

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-26353
  • report
    https://access.redhat.com/security/cve/CVE-2022-26354
  • report
    https://bugzilla.redhat.com/2063197
  • report
    https://bugzilla.redhat.com/2063257
  • advisory
    https://errata.almalinux.org/9/ALSA-2022-5263.html