Skip to content
OpenAdvisories
Medium ELSA-2023-2162 2 CVEs

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Summary

[7.2.0-14]
- Rebuild for 9.2 release
- Resolves: bz#2173590
(bugs in emulation of BMI instructions (for libguestfs without KVM))
- Resolves: bz#2156876
([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22))

[7.2.0-13]
- kvm-target-i386-fix-operand-size-of-unary-SSE-operations.patch [bz#2173590]
- kvm-tests-tcg-i386-Introduce-and-use-reg_t-consistently.patch [bz#2173590]
- kvm-target-i386-Fix-BEXTR-instruction.patch [bz#2173590]
- kvm-target-i386-Fix-C-flag-for-BLSI-BLSMSK-BLSR.patch [bz#2173590]
- kvm-target-i386-fix-ADOX-followed-by-ADCX.patch [bz#2173590]
- kvm-target-i386-Fix-32-bit-AD-CO-X-insns-in-64-bit-mode.patch [bz#2173590]
- kvm-target-i386-Fix-BZHI-instruction.patch [bz#2173590]
- kvm-intel-iommu-fail-DEVIOTLB_UNMAP-without-dt-mode.patch [bz#2156876]
- Resolves: bz#2173590
(bugs in emulation of BMI instructions (for libguestfs without KVM))
- Resolves: bz#2156876
([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22))

[7.2.0-12]
- kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2155748]
- kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2155748]
- kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2155748]
- kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2175660]
- kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2175660]
- kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2175660]
- kvm-edu-add-smp_mb__after_rmw.patch [bz#2175660]
- kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2175660]
- kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2175660]
- kvm-physmem-add-missing-memory-barrier.patch [bz#2175660]
- kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2175660]
- kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2175660]
- Resolves: bz#2155748
(qemu crash on void blk_drain(BlockBackend *): Assertion qemu_in_main_thread() failed)
- Resolves: bz#2175660
(Guest hangs when starting or rebooting)

[7.2.0-11]
- kvm-hw-smbios-fix-field-corruption-in-type-4-table.patch [bz#2169904]
- Resolves: bz#2169904
([SVVP] job 'Check SMBIOS Table Specific Requirements' failed on win2022)

[7.2.0-10]
- kvm-block-temporarily-hold-the-new-AioContext-of-bs_top-.patch [bz#2168209]
- Resolves: bz#2168209
(Qemu coredump after do snapshot of mirrored top image and its converted base image(iothread enabled))

[7.2.0-9]
- kvm-tests-qtest-netdev-test-stream-and-dgram-backends.patch [bz#2169232]
- kvm-net-stream-add-a-new-option-to-automatically-reconne.patch [bz#2169232]
- kvm-linux-headers-Update-to-v6.1.patch [bz#2158704]
- kvm-util-userfaultfd-Add-uffd_open.patch [bz#2158704]
- kvm-util-userfaultfd-Support-dev-userfaultfd.patch [bz#2158704]
- kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2169732]
- kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2169732]
- kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168172]
- Resolves: bz#2169232
(RFE: reconnect option for stream socket back-end)
- Resolves: bz#2158704
(RFE: Prefer /dev/userfaultfd over userfaultfd(2) syscall)
- Resolves: bz#2169732
(Multifd migration fails under a weak network/socket ordering race)
- Resolves: bz#2168172
([s390x] qemu-kvm coredumps when SE crashes)

[7.2.0-8]
- kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2150180]
- kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2150180]
- kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2150180]
- kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2150180]
- kvm-accel-tcg-Test-CPUJumpCache-in-tb_jmp_cache_clear_pa.patch [bz#2165280]
- kvm-block-Improve-empty-format-specific-info-dump.patch [bz#1860292]
- kvm-block-file-Add-file-specific-image-info.patch [bz#1860292]
- kvm-block-vmdk-Change-extent-info-type.patch [bz#1860292]
- kvm-block-Split-BlockNodeInfo-off-of-ImageInfo.patch [bz#1860292]
- kvm-qemu-img-Use-BlockNodeInfo.patch [bz#1860292]
- kvm-block-qapi-Let-bdrv_query_image_info-recurse.patch [bz#1860292]
- kvm-block-qapi-Introduce-BlockGraphInfo.patch [bz#1860292]
- kvm-block-qapi-Add-indentation-to-bdrv_node_info_dump.patch [bz#1860292]
- kvm-iotests-Filter-child-node-information.patch [bz#1860292]
- kvm-iotests-106-214-308-Read-only-one-size-line.patch [bz#1860292]
- kvm-qemu-img-Let-info-print-block-graph.patch [bz#1860292]
- kvm-qemu-img-Change-info-key-names-for-protocol-nodes.patch [bz#1860292]
- kvm-Revert-vhost-user-Monitor-slave-channel-in-vhost_use.patch [bz#2155173]
- kvm-Revert-vhost-user-Introduce-nested-event-loop-in-vho.patch [bz#2155173]
- kvm-virtio-rng-pci-fix-transitional-migration-compat-for.patch [bz#2162569]
- Resolves: bz#2150180
(qemu-img finishes successfully while having errors in commit or bitmaps operations)
- Resolves: bz#2165280
([kvm-unit-tests] debug-wp-migration fails)
- Resolves: bz#1860292
(RFE: add extent_size_hint information to qemu-img info)
- Resolves: bz#2155173
([vhost-user] unable to start vhost net: 71: falling back on userspace)
- Resolves: bz#2162569
([transitional device][virtio-rng-pci-transitional]Stable Guest ABI failed between RHEL 8.6 to RHEL 9.2)

[7.2.0-7]
- kvm-vdpa-use-v-shadow_vqs_enabled-in-vhost_vdpa_svqs_sta.patch [bz#2104412]
- kvm-vhost-set-SVQ-device-call-handler-at-SVQ-start.patch [bz#2104412]
- kvm-vhost-allocate-SVQ-device-file-descriptors-at-device.patch [bz#2104412]
- kvm-vhost-move-iova_tree-set-to-vhost_svq_start.patch [bz#2104412]
- kvm-vdpa-add-vhost_vdpa_net_valid_svq_features.patch [bz#2104412]
- kvm-vdpa-request-iova_range-only-once.patch [bz#2104412]
- kvm-vdpa-move-SVQ-vring-features-check-to-net.patch [bz#2104412]
- kvm-vdpa-allocate-SVQ-array-unconditionally.patch [bz#2104412]
- kvm-vdpa-add-asid-parameter-to-vhost_vdpa_dma_map-unmap.patch [bz#2104412]
- kvm-vdpa-store-x-svq-parameter-in-VhostVDPAState.patch [bz#2104412]
- kvm-vdpa-add-shadow_data-to-vhost_vd

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 9 qemu-guest-agent 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-img 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-audio-pa 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-block-curl 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-block-rbd 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-common 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-core 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-device-display-virtio-gpu 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-device-display-virtio-gpu-pci 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-device-display-virtio-vga 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-device-usb-host 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-device-usb-redirect 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-docs 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-tools 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-ui-egl-headless 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-kvm-ui-opengl 17:7.2.0-14.el9_2
Oracle Linux · 9 qemu-pr-helper 17:7.2.0-14.el9_2

Vulnerabilities 2