ELSA-2022-5263

ELSA-2022-5263 - qemu-kvm security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2022-07-04

Description

[6.2.0-11.el9_0.3]
- kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2071102]
- kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2075635]
- kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2075640]
- Resolves: bz#2071102
(RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-9.0.0.z])
- Resolves: bz#2075635
(CVE-2022-26353 qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-9] [rhel-9.0.0.z])
- Resolves: bz#2075640
(CVE-2022-26354 qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-9] [rhel-9.0.0.z])

[6.2.0-11.el9_0.2]
- kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2053584]
- kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2053584]
- kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2038051]
- kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2038051]
- kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2043531]
- kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2043531]
- kvm-tests-acpi-add-SLIC-table-test.patch [bz#2043531]
- kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2043531]
- kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2043531]
- kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2043531]
- kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2043531]
- kvm-tests-acpi-update-expected-blobs.patch [bz#2043531]
- kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2043531]
- kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2043531]
- Resolves: bz#2053584
(watchdog: BUG: soft lockup - CPU#3 stuck for 22s! [cat:2843])
- Resolves: bz#2038051
(Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04')
- Resolves: bz#2043531
(Guest can not start with SLIC acpi table)

[6.2.0-11.el9_0.1]
- kvm-RHEL-mark-old-machine-types-as-deprecated.patch [bz#2052050]
- kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2059786]
- kvm-spec-Fix-obsolete-for-spice-subpackages.patch [bz#2059175 bz#2059146]
- kvm-spec-Obsolete-old-usb-redir-subpackage.patch [bz#2059175 bz#2059146]
- kvm-spec-Obsolete-ssh-driver.patch [bz#2059175 bz#2059146]

Related CVEs

CVE-2022-26354

CVE-2022-26353

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	qemu-kvm-6.2.0-11.el9_0.3.src.rpm	0fe7e6bdb6b8d7e62a09cec8b4b4e6ace69ec6a01bf8ebeaad96cc1322424127	-	ol9_aarch64_appstream
	qemu-guest-agent-6.2.0-11.el9_0.3.aarch64.rpm	dc8ce0258378acca70608d3710e370688527fd51aa528cd8a2253b9855d1e6f3	-	ol9_aarch64_appstream
	qemu-img-6.2.0-11.el9_0.3.aarch64.rpm	d59cd2c066c934b4084fd1b961177676b8ff20490b5bd4a642f305fffe3ce4cb	-	ol9_aarch64_appstream
	qemu-kvm-6.2.0-11.el9_0.3.aarch64.rpm	22d1dba963eac494bc52a749407506495719d3194703bd937fb4f8537ec7d68e	-	ol9_aarch64_appstream
	qemu-kvm-audio-pa-6.2.0-11.el9_0.3.aarch64.rpm	3e193ff24fb8e28d04b2c592cd88216112fde6c857d30c11e0b09691964d190e	-	ol9_aarch64_appstream
	qemu-kvm-block-curl-6.2.0-11.el9_0.3.aarch64.rpm	29decbf33fa6ec6a7331f2c56264554e25cb49c6cfcb7f6e7bf35b4622567663	-	ol9_aarch64_appstream
	qemu-kvm-block-rbd-6.2.0-11.el9_0.3.aarch64.rpm	822eb9bd98d25b62292894b569428f3c1d24f10170edc86ffa1ff7bfe86d0bf4	-	ol9_aarch64_appstream
	qemu-kvm-common-6.2.0-11.el9_0.3.aarch64.rpm	b348ea5481623f389e869cce55d0ac184108b4b5565aef27bb71149e25c64473	-	ol9_aarch64_appstream
	qemu-kvm-core-6.2.0-11.el9_0.3.aarch64.rpm	078d73b2fc99e6b9e8369c98c9c46a451658cfbd4d5c9aea1d607c053be5430d	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-6.2.0-11.el9_0.3.aarch64.rpm	fdb746480da116c37d4a5b64e6024f3b02ce14096ed27a1dd60d291ccac76aac	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-gl-6.2.0-11.el9_0.3.aarch64.rpm	28c6b1dec07af594d3f61f5326ae4123ab3929cd2792826eca668fdb22bb4b40	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-6.2.0-11.el9_0.3.aarch64.rpm	a09c79f60c780b99cfcaa1f63a4689b2abad25660618c3f77ae048d36397b8fe	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-gl-6.2.0-11.el9_0.3.aarch64.rpm	cbf90199906f31d778ba767a1fa6f2d3008141418746d237afc97c62612220a0	-	ol9_aarch64_appstream
	qemu-kvm-device-usb-host-6.2.0-11.el9_0.3.aarch64.rpm	451a423f001917034f89a9de6e9ba1997214318afed4cfdf0c76f7577532c011	-	ol9_aarch64_appstream
	qemu-kvm-docs-6.2.0-11.el9_0.3.aarch64.rpm	675d10cd9feb54f420135b970ca3e73c489189e5d69ade7a8971007179abc365	-	ol9_aarch64_appstream
	qemu-kvm-tools-6.2.0-11.el9_0.3.aarch64.rpm	a2c73fd71032008350aa668974cc0cfb37bc9c4c8e7c4d563fcc5a63ed4ffbc5	-	ol9_aarch64_appstream
	qemu-pr-helper-6.2.0-11.el9_0.3.aarch64.rpm	651f44ab84f1c63252e851459d2b64fdf7d58fe808ac3644ff30e6e2c25a202e	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	qemu-kvm-6.2.0-11.el9_0.3.src.rpm	0fe7e6bdb6b8d7e62a09cec8b4b4e6ace69ec6a01bf8ebeaad96cc1322424127	-	ol9_x86_64_appstream
	qemu-guest-agent-6.2.0-11.el9_0.3.x86_64.rpm	60cf8ebdca1394daa2747874237e274502e66aea29aaa1728719270b855b738f	-	ol9_x86_64_appstream
	qemu-img-6.2.0-11.el9_0.3.x86_64.rpm	af56bfe166954de2080336a4e2f65bd260730c201384847be003d3922ec6459d	-	ol9_x86_64_appstream
	qemu-kvm-6.2.0-11.el9_0.3.x86_64.rpm	2111f704e1048ca062b8bc8fbd093b3f2aaa4dfad49eef7700f5ccf331ed6b63	-	ol9_x86_64_appstream
	qemu-kvm-audio-pa-6.2.0-11.el9_0.3.x86_64.rpm	31433fbffc333ee0daefde9c410f1bcd09b45f0aa12f96edb1916a077b63402a	-	ol9_x86_64_appstream
	qemu-kvm-block-curl-6.2.0-11.el9_0.3.x86_64.rpm	334e7107c17b6faec74569db36d74333c54be9e40d7e38625eb30a6e42ac899a	-	ol9_x86_64_appstream
	qemu-kvm-block-rbd-6.2.0-11.el9_0.3.x86_64.rpm	dbd7b72b00e0a5f344576665aac3f1d1a0510edbf8863cd7368b9ea93ec214e4	-	ol9_x86_64_appstream
	qemu-kvm-common-6.2.0-11.el9_0.3.x86_64.rpm	33222e49181d9d285121f0930681cc7a38a0228a91b5fa865925be5efc3a89de	-	ol9_x86_64_appstream
	qemu-kvm-core-6.2.0-11.el9_0.3.x86_64.rpm	794faa75391879983db05127600f43c10fae32df91f1d29e57547dac4b6fbeb6	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-6.2.0-11.el9_0.3.x86_64.rpm	d864457b7165ae0ed714b7f048952783f44996476c100cb4b3e137b5d043217a	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-gl-6.2.0-11.el9_0.3.x86_64.rpm	87f87bcbadda8466ba20f7e3c69b4dfc56c4faf278199782fc69abe732b6bdfc	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-6.2.0-11.el9_0.3.x86_64.rpm	5b9cba2278f8ef8dfa7d85a7abb282cad84b56a9e1a0b29b3983a1b0ddb9ba07	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-gl-6.2.0-11.el9_0.3.x86_64.rpm	44a1d57442d6fa968e2959341e0c5fb0d68e6ee57fd349e547d77b8a21fbeaac	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-vga-6.2.0-11.el9_0.3.x86_64.rpm	6780e6dc20e00ba78eff4195362eaafb8c9b4cbaad7f136bcb82611dea308da0	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-vga-gl-6.2.0-11.el9_0.3.x86_64.rpm	f6bd022f16c1d1972e0ab107277a834830d5b146e428ea685a8e020313f93c71	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-host-6.2.0-11.el9_0.3.x86_64.rpm	62ebcbe1d1593ef90ccf2fb15ad179a757e717cf7218c61386f739336168d82c	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-redirect-6.2.0-11.el9_0.3.x86_64.rpm	5e5e4019debb78c0f5f6eec430851a70bf9925a622fdc9d7461f9f4b97c17d60	-	ol9_x86_64_appstream
	qemu-kvm-docs-6.2.0-11.el9_0.3.x86_64.rpm	c1f2cd7106f3d7d94b8422b6736204a33acd7a82b43cafea1e38fc1f381eadb1	-	ol9_x86_64_appstream
	qemu-kvm-tools-6.2.0-11.el9_0.3.x86_64.rpm	3a225d3e4287c28686c4ef23960b2bd32cfdf54245c30925e932e53271b56f5c	-	ol9_x86_64_appstream
	qemu-kvm-ui-egl-headless-6.2.0-11.el9_0.3.x86_64.rpm	0727bc8bd3105dbe036ef9132b38859c7a3ca060ccc6e5fcf11868f121b776c6	-	ol9_x86_64_appstream
	qemu-kvm-ui-opengl-6.2.0-11.el9_0.3.x86_64.rpm	8bdc67836db5079d4165501d6882c0a87a515d3a404b2940519fea27b69a781f	-	ol9_x86_64_appstream
	qemu-pr-helper-6.2.0-11.el9_0.3.x86_64.rpm	20acf2e5e2f1d8565f01174284de8fcd6a3de14bdc6757d2a78ae79b105695a7	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team