Description
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | vdsm | 4.30.9 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | redhat-release-virtualization-host +1 | 4.2-8.3.el7 | RHSA-2019:0457 |
| RHEL 7 | redhat-virtualization-host +1 | 4.2-20190219.0.el7_6 | RHSA-2019:0457 |
| RHEL 7 | vdsm +20 | 4.20.47-1.el7ev | RHSA-2019:0458 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Gluster Storage 3 | ioprocess +1 | 1.1.2-1.el7ev | RHBA-2019:1965 |
| Red Hat Gluster Storage 3 | safelease | 1.0-7.el7ev | RHBA-2019:1965 |
| Red Hat Gluster Storage 3 | vdsm +19 | 4.30.18-1.0.el7rhgs | RHBA-2019:1965 |
Advisories 3
- RHSA-2019:0458 Red Hat Security Advisory: vdsm security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2019:1965 Red Hat Bug Fix Advisory: vdsm bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2019:0457 Red Hat Security Advisory: redhat-virtualization-host security update Red Hat Security Advisories (RHSA) · Jun 28, 2026