Summary
Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.
Security Fix(es):
* libvirt: stack use-after-free in virNetClientIOEventLoop() (CVE-2024-4418)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 31
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libvirt | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-client | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-client-qemu | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-common | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-network | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-nwfilter | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-interface | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-network | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nodedev | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nwfilter | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-qemu | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-secret | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-core | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-disk | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-iscsi | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-logical | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-mpath | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-rbd | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-scsi | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-kvm | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-lock | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-log | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-lockd | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-sanlock | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-proxy | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-devel | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-docs | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-libs | 10.0.0-6.6.el9_4.alma.1 |
| AlmaLinux · 9 | libvirt-nss | 10.0.0-6.6.el9_4.alma.1 |
Vulnerabilities 1
-
Medium 6.2
Libvirt: stack use-after-free in virnetclientioeventloop()
A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOE…