Skip to content
OpenAdvisories
Medium RLSA-2022:7967 4 CVEs

Moderate: qemu-kvm security, bug fix, and enhancement update

Published Nov 15, 2022 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

The following packages have been upgraded to a later upstream version: qemu-kvm (7.0.0). (BZ#2064757)

Security Fix(es):

* QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free (CVE-2021-3750)

* QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507)

* QEMU: intel-hda: segmentation fault due to stack overflow (CVE-2021-3611)

* QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 qemu-kvm 7:7.0.0-13.el9

Vulnerabilities 4

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477099
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1708300
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1879437
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1904267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1951118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1968509
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1973784
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1982600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1995710
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1999073
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2020993
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2023977
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2026955
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2035002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2037612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2041823
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2044162
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2046029
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2060839
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062809
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062813
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062817
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062819
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062828
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064530
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064782
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2065398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2066824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2070804
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2079347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2079938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081022
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2086262
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2094252
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2094270