Skip to content
OpenAdvisories
Medium ELSA-2022-7967 4 CVEs

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Summary

[7.0.0-13]
- kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2117546]
- kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2117546]
- Resolves: bz#2117546
([RHEL9.1] Guests in VMX root operation fail to reboot with QEMUs system_reset command)

[7.0.0-12]
- kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120275]
- kvm-vhost-Get-vring-base-from-vq-not-svq.patch [bz#2114060]
- kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [bz#2114060]
- kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [bz#2114060]
- kvm-util-Return-void-on-iova_tree_remove.patch [bz#2114060]
- kvm-util-accept-iova_tree_remove_parameter-by-value.patch [bz#2114060]
- kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [bz#2114060]
- kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [bz#2114060]
- kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [bz#2114060]
- kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [bz#2114060]
- kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [bz#2114060]
- kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [bz#2114060]
- kvm-vhost-Delete-useless-read-memory-barrier.patch [bz#2114060]
- kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [bz#2114060]
- kvm-vhost_net-Add-NetClientInfo-start-callback.patch [bz#2114060]
- kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [bz#2114060]
- kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [bz#2114060]
- kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [bz#2114060]
- kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [bz#2114060]
- kvm-vhost_net-add-NetClientState-load-callback.patch [bz#2114060]
- kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [bz#2114060]
- kvm-vdpa-Delete-CVQ-migration-blocker.patch [bz#2114060]
- kvm-virtio-scsi-fix-race-in-virtio_scsi_dataplane_start.patch [bz#2099541]
- Resolves: bz#2120275
(Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-9.1])
- Resolves: bz#2114060
(vDPA state restore support through control virtqueue in Qemu)
- Resolves: bz#2099541
(qemu coredump with error Assertion qemu_mutex_iothread_locked() failed when repeatly hotplug/unplug disks in pause status)

[7.0.0-11]
- kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466]
- kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466]
- kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466]
- kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466]
- kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466]
- kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466]
- kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303]
- kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876]
- kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876]
- kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876]
- kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876]
- Resolves: bz#2107466
(zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
- Resolves: bz#2112303
(virtio-blk: Cant boot fresh installation from used 512 cluster_size image under certain conditions)
- Resolves: bz#2116876
(Fixes for vDPA control virtqueue support in Qemu)

[7.0.0-10]
- kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363]
- kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363]
- kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363]
- kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363]
- kvm-meson-create-have_vhost_-variables.patch [bz#1939363]
- kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363]
- kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363]
- kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363]
- kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363]
- kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363]
- kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363]
- kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363]
- kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363]
- kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363]
- kvm-vhost-Add-SVQDescState.patch [bz#1939363]
- kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363]
- kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363]
- kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363]
- kvm-vhost-add-vhost_svq_poll.patch [bz#1939363]
- kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363]
- kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363]
- kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363]
- kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363]
- kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363]
- kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363]
- kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363]
- kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363]
- kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994]
- kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994]
- kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608]
- kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934]
- kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934]
- Resolves: bz#1939363
(vDPA control virtqueue support in Qemu)
- Resolves: bz#2111994
(RHEL9: skey test in kvm_unit_test got failed)
- Resolves: bz#2095608
(Please correct the error message when try to start qemu with -M kernel-irqchip=split)
- Resolves: bz#2099934
(Guest reboot on destination host after postcopy migration completed)

[7.0.0-9]
- kvm-virtio-iommu-Add-bypass-mode-support-

Fixed packages 21

ReleasePackageFixed in
Oracle Linux · 9 qemu-guest-agent 17:7.0.0-13.el9
Oracle Linux · 9 qemu-img 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-audio-pa 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-block-curl 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-block-rbd 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-common 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-core 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-display-virtio-gpu 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-display-virtio-gpu-gl 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-display-virtio-gpu-pci 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-display-virtio-gpu-pci-gl 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-display-virtio-vga 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-display-virtio-vga-gl 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-usb-host 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-device-usb-redirect 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-docs 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-tools 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-ui-egl-headless 17:7.0.0-13.el9
Oracle Linux · 9 qemu-kvm-ui-opengl 17:7.0.0-13.el9
Oracle Linux · 9 qemu-pr-helper 17:7.0.0-13.el9

Vulnerabilities 4