ELSA-2024-9136

ELSA-2024-9136 - qemu-kvm security update

Type:SECURITY
Impact:MODERATE
Release Date:2024-11-14

Description


[9.0.0-10]
- kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617]
- Resolves: RHEL-52617
(CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])

[9.0.0-9]
- kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-52250]
- Resolves: RHEL-52250
(fsfreeze hooks break on the systems first restorecon)

[9.0.0-8]
- kvm-introduce-pc_rhel_9_5_compat.patch [RHEL-39544]
- kvm-target-i386-add-guest-phys-bits-cpu-property.patch [RHEL-39544]
- kvm-kvm-add-support-for-guest-physical-bits.patch [RHEL-39544]
- kvm-i386-kvm-Move-architectural-CPUID-leaf-generation-to.patch [RHEL-39544]
- kvm-target-i386-Introduce-Icelake-Server-v7-to-enable-TS.patch [RHEL-39544]
- kvm-target-i386-Add-new-CPU-model-SierraForest.patch [RHEL-39544]
- kvm-target-i386-Export-RFDS-bit-to-guests.patch [RHEL-39544]
- kvm-pci-host-q35-Move-PAM-initialization-above-SMRAM-ini.patch [RHEL-39544]
- kvm-q35-Introduce-smm_ranges-property-for-q35-pci-host.patch [RHEL-39544]
- kvm-hw-i386-acpi-Set-PCAT_COMPAT-bit-only-when-pic-is-no.patch [RHEL-39544]
- kvm-confidential-guest-support-Add-kvm_init-and-kvm_rese.patch [RHEL-39544]
- kvm-i386-sev-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
- kvm-ppc-pef-switch-to-use-confidential_guest_kvm_init-re.patch [RHEL-39544]
- kvm-s390-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
- kvm-scripts-update-linux-headers-Add-setup_data.h-to-imp.patch [RHEL-39544]
- kvm-scripts-update-linux-headers-Add-bits.h-to-file-impo.patch [RHEL-39544]
- kvm-linux-headers-update-to-current-kvm-next.patch [RHEL-39544]
- kvm-runstate-skip-initial-CPU-reset-if-reset-is-not-actu.patch [RHEL-39544]
- kvm-KVM-track-whether-guest-state-is-encrypted.patch [RHEL-39544]
- kvm-KVM-remove-kvm_arch_cpu_check_are_resettable.patch [RHEL-39544]
- kvm-target-i386-introduce-x86-confidential-guest.patch [RHEL-39544]
- kvm-target-i386-Implement-mc-kvm_type-to-get-VM-type.patch [RHEL-39544]
- kvm-target-i386-SEV-use-KVM_SEV_INIT2-if-possible.patch [RHEL-39544]
- kvm-i386-sev-Add-legacy-vm-type-parameter-for-SEV-guest-.patch [RHEL-39544]
- kvm-hw-i386-sev-Use-legacy-SEV-VM-types-for-older-machin.patch [RHEL-39544]
- kvm-trace-kvm-Split-address-space-and-slot-id-in-trace_k.patch [RHEL-39544]
- kvm-kvm-Introduce-support-for-memory_attributes.patch [RHEL-39544]
- kvm-RAMBlock-Add-support-of-KVM-private-guest-memfd.patch [RHEL-39544]
- kvm-kvm-Enable-KVM_SET_USER_MEMORY_REGION2-for-memslot.patch [RHEL-39544]
- kvm-kvm-memory-Make-memory-type-private-by-default-if-it.patch [RHEL-39544]
- kvm-HostMem-Add-mechanism-to-opt-in-kvm-guest-memfd-via-.patch [RHEL-39544]
- kvm-RAMBlock-make-guest_memfd-require-uncoordinated-disc.patch [RHEL-39544]
- kvm-physmem-Introduce-ram_block_discard_guest_memfd_rang.patch [RHEL-39544]
- kvm-kvm-handle-KVM_EXIT_MEMORY_FAULT.patch [RHEL-39544]
- kvm-kvm-tdx-Don-t-complain-when-converting-vMMIO-region-.patch [RHEL-39544]
- kvm-kvm-tdx-Ignore-memory-conversion-to-shared-of-unassi.patch [RHEL-39544]
- kvm-hw-i386-x86-Eliminate-two-if-statements-in-x86_bios_.patch [RHEL-39544]
- kvm-hw-i386-Have-x86_bios_rom_init-take-X86MachineState-.patch [RHEL-39544]
- kvm-hw-i386-pc_sysfw-Remove-unused-parameter-from-pc_isa.patch [RHEL-39544]
- kvm-hw-i386-x86-Don-t-leak-isa-bios-memory-regions.patch [RHEL-39544]
- kvm-hw-i386-x86-Don-t-leak-pc.bios-memory-region.patch [RHEL-39544]
- kvm-hw-i386-x86-Extract-x86_isa_bios_init-from-x86_bios_.patch [RHEL-39544]
- kvm-hw-i386-pc_sysfw-Alias-rather-than-copy-isa-bios-reg.patch [RHEL-39544]
- kvm-i386-correctly-select-code-in-hw-i386-that-depends-o.patch [RHEL-39544]
- kvm-i386-pc-remove-unnecessary-MachineClass-overrides.patch [RHEL-39544]
- kvm-hw-i386-split-x86.c-in-multiple-parts.patch [RHEL-39544]
- kvm-scripts-update-linux-header.sh-be-more-src-tree-frie.patch [RHEL-39544]
- kvm-scripts-update-linux-headers.sh-Remove-temporary-dir.patch [RHEL-39544]
- kvm-scripts-update-linux-headers.sh-Fix-the-path-of-setu.patch [RHEL-39544]
- kvm-update-linux-headers-fix-forwarding-to-asm-generic-h.patch [RHEL-39544]
- kvm-update-linux-headers-move-pvpanic.h-to-correct-direc.patch [RHEL-39544]
- kvm-linux-headers-Update-to-current-kvm-next.patch [RHEL-39544]
- kvm-update-linux-headers-import-linux-kvm_para.h-header.patch [RHEL-39544]
- kvm-machine-allow-early-use-of-machine_require_guest_mem.patch [RHEL-39544]
- kvm-i386-sev-Replace-error_report-with-error_setg.patch [RHEL-39544]
- kvm-i386-sev-Introduce-sev-common-type-to-encapsulate-co.patch [RHEL-39544]
- kvm-i386-sev-Move-sev_launch_update-to-separate-class-me.patch [RHEL-39544]
- kvm-i386-sev-Move-sev_launch_finish-to-separate-class-me.patch [RHEL-39544]
- kvm-i386-sev-Introduce-sev-snp-guest-object.patch [RHEL-39544]
- kvm-i386-sev-Add-a-sev_snp_enabled-helper.patch [RHEL-39544]
- kvm-i386-sev-Add-sev_kvm_init-override-for-SEV-class.patch [RHEL-39544]
- kvm-i386-sev-Add-snp_kvm_init-override-for-SNP-class.patch [RHEL-39544]
- kvm-i386-cpu-Set-SEV-SNP-CPUID-bit-when-SNP-enabled.patch [RHEL-39544]
- kvm-i386-sev-Don-t-return-launch-measurements-for-SEV-SN.patch [RHEL-39544]
- kvm-i386-sev-Add-a-class-method-to-determine-KVM-VM-type.patch [RHEL-39544]
- kvm-i386-sev-Update-query-sev-QAPI-format-to-handle-SEV-.patch [RHEL-39544]
- kvm-i386-sev-Add-the-SNP-launch-start-context.patch [RHEL-39544]
- kvm-i386-sev-Add-handling-to-encrypt-finalize-guest-laun.patch [RHEL-39544]
- kvm-i386-sev-Set-CPU-state-to-protected-once-SNP-guest-p.patch [RHEL-39544]
- kvm-hw-i386-sev-Add-function-to-get-SEV-metadata-from-OV.patch [RHEL-39544]
- kvm-i386-sev-Add-support-for-populating-OVMF-metadata-pa.patch [RHEL-39544]
- kvm-i386-sev-Add-support-for-SNP-CPUID-validation.patch [RHEL-39544]
- kvm-hw-i386-sev-Add-support-to-encrypt-BIOS-when-SEV-SNP.patch [RHEL-39544]
- kvm-i386-sev-Invoke-launch_updata_data-for-SEV-class.patch [RHEL-39544]
- kvm-i386-sev-Invoke-launch_updata_data-for-SNP-class.patch [RHEL-39544]
- kvm-i386-kvm-Add-KVM_EXIT_HYPERCALL-handling-for-KVM_HC_.patch [RHEL-39544]
- kvm-i386-sev-Enable-KVM_HC_MAP_GPA_RANGE-hcall-for-SNP-g.patch [RHEL-39544]
- kvm-i386-sev-Extract-build_kernel_loader_hashes.patch [RHEL-39544]
- kvm-i386-sev-Reorder-struct-declarations.patch [RHEL-39544]
- kvm-i386-sev-Allow-measured-direct-kernel-boot-on-SNP.patch [RHEL-39544]
- kvm-memory-Introduce-memory_region_init_ram_guest_memfd.patch [RHEL-39544]
- kvm-hw-i386-sev-Use-guest_memfd-for-legacy-ROMs.patch [RHEL-39544]
- kvm-hw-i386-Add-support-for-loading-BIOS-using-guest_mem.patch [RHEL-39544]
- kvm-i386-sev-fix-unreachable-code-coverity-issue.patch [RHEL-39544]
- kvm-i386-sev-Move-SEV_COMMON-null-check-before-dereferen.patch [RHEL-39544]
- kvm-i386-sev-Return-when-sev_common-is-null.patch [RHEL-39544]
- kvm-target-i386-SEV-fix-formatting-of-CPUID-mismatch-mes.patch [RHEL-39544]
- kvm-i386-sev-Fix-error-message-in-sev_get_capabilities.patch [RHEL-39544]
- kvm-i386-sev-Fallback-to-the-default-SEV-device-if-none-.patch [RHEL-39544]
- kvm-i386-sev-Don-t-allow-automatic-fallback-to-legacy-KV.patch [RHEL-39544]
- kvm-target-i386-SEV-fix-mismatch-in-vcek-disabled-proper.patch [RHEL-39544]
- kvm-virtio-rng-block-max-bytes-0.patch [RHEL-50336]
- kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-50000]
- kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-50000]
- kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-50000]
- kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-50000]
- kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52617]
- kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52617]
- kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52617]
- kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52617]
- Resolves: RHEL-39544
([QEMU] Add support for AMD SEV-SNP to Qemu)
- Resolves: RHEL-50336
(Fail to boot up the guest including vtpm and virtio-rng (max-bytes=0) devices)
- Resolves: RHEL-50000
(scsi-block: Cannot setup Windows Failover Cluster, qemu crashes on assert)
- Resolves: RHEL-52617
(CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])

[9.0.0-7]
- kvm-hw-virtio-Fix-the-de-initialization-of-vhost-user-de.patch [RHEL-40708]
- kvm-hw-arm-virt-Avoid-unexpected-warning-from-Linux-gues.patch [RHEL-39936]
- Resolves: RHEL-40708
([RHEL9.5.0][virtio_fs][s390x] after hot-unplug the vhost-user-fs-ccw device, the device is failed to hot-plug again )
- Resolves: RHEL-39936
(ARCH_DMA_MINALIGN smaller than CTR_EL0.CWG (128 < 256) on FUJITSU)

[9.0.0-6]
- kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35611]
- kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35611]
- kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35611]
- kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35611]
- Resolves: RHEL-35611
(CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-9.5])

[9.0.0-5]
- kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-42411]
- kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-34618 RHEL-38697]
- kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-34618 RHEL-38697]
- kvm-block-crypto-create-ciphers-on-demand.patch [RHEL-36159]
- kvm-crypto-block-drop-qcrypto_block_open-n_threads-argum.patch [RHEL-36159]
- Resolves: RHEL-42411
(qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command)
- Resolves: RHEL-34618
(aio=io_uring: Assertion failure luringcb->co->ctx == s->aio_context' with block_resize)
- Resolves: RHEL-38697
(aio=native: Assertion failure laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)
- Resolves: RHEL-36159
(qemu crash on Assertion block->n_free_ciphers > 0' failed in guest installation with luks and iothread-vq-mapping)

[9.0.0-4]
- kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-33440]
- kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-33440]
- kvm-virtio-gpu-fix-v2-migration.patch [RHEL-34621]
- kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-34621]
- Resolves: RHEL-33440
(Qemu hang when quit dst vm after storage migration(nbd+tls))
- Resolves: RHEL-34621
([RHEL9.5.0][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)

[9.0.0-3]
- kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-33440]
- kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-33440]
- Resolves: RHEL-33440
(Qemu hang when quit dst vm after storage migration(nbd+tls))

[9.0.0-2]
- kvm-hw-arm-virt-Fix-spurious-call-to-arm_virt_compat_set.patch [RHEL-34945]
- kvm-Revert-x86-rhel-9.4.0-machine-type-compat-fix.patch [RHEL-30362]
- Resolves: RHEL-34945
([aarch64, kvm-unit-tests] all tests tagged as FAIL [qemu-kvm: GLib: g_ptr_array_add: assertion 'rarray' failed] )
- Resolves: RHEL-30362
(Check/fix machine type compatibility for QEMU 9.0.0 [x86_64][rhel-9.5.0])

[9.0.0-1]
- Rebase to QEMU 9.0.0 [RHEL-28073]
- Resolves: RHEL-28073
(Rebase qemu-kvm to QEMU 9.0.0 for RHEL 9.5)


Related CVEs


CVE-2024-26327
CVE-2024-7409
CVE-2024-3446

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) qemu-kvm-9.0.0-10.el9_5.src.rpmce9531be4b8a39f3969aaa2bdaefc2e7f246f88d97a5ee371706fb3eb7457d22-ol9_aarch64_appstream
qemu-guest-agent-9.0.0-10.el9_5.aarch64.rpmd134486ee5a94af2a016270c22dabfed8bc2b4686f4117995e6e7240e5cd06c6-ol9_aarch64_appstream
qemu-img-9.0.0-10.el9_5.aarch64.rpmc0ed9e01633bb5d6b8b4370c05747280aea8f4eb87c32e98d6894f03faecdeea-ol9_aarch64_appstream
qemu-kvm-9.0.0-10.el9_5.aarch64.rpmde70cbc96ee9e4fb66844bfc38397acb236a87be132fe5fa7affcb863418fd6e-ol9_aarch64_appstream
qemu-kvm-audio-pa-9.0.0-10.el9_5.aarch64.rpm6ec3e912e6c7f8548c0c8d2e7e7b2cd80dde25d75cf024d2789489c703412968-ol9_aarch64_appstream
qemu-kvm-block-blkio-9.0.0-10.el9_5.aarch64.rpm76b41e46d816c79e780af752dc9d8f724101788ce92cb445fa11bcfeb0dc192b-ol9_aarch64_appstream
qemu-kvm-block-curl-9.0.0-10.el9_5.aarch64.rpmd5fdaededbb7886b43f9d62aeb36873942faf7c6f8576ec3229df1c39c45023a-ol9_aarch64_appstream
qemu-kvm-block-rbd-9.0.0-10.el9_5.aarch64.rpm7a82faa2246d64b2fcf9460412eb7c79e47022b0dc94edde6caeeb62d514b805-ol9_aarch64_appstream
qemu-kvm-common-9.0.0-10.el9_5.aarch64.rpme96bc210afab15d8cc913efd0f694a0645a33c3043611a9d12ca4715953b4c6b-ol9_aarch64_appstream
qemu-kvm-core-9.0.0-10.el9_5.aarch64.rpm78611fa8ce91046a38a08dd233b7f6ec16092a0152011ab0485a4b4771eb7fee-ol9_aarch64_appstream
qemu-kvm-device-display-virtio-gpu-9.0.0-10.el9_5.aarch64.rpm197fab7aebd6c49883b26b52d133948ab206b6ae80b6ae71275a92ad1dcafaec-ol9_aarch64_appstream
qemu-kvm-device-display-virtio-gpu-pci-9.0.0-10.el9_5.aarch64.rpm26df857450d992df7522508512b07cb48b7d2312089ab99ddf09c84d25d54b61-ol9_aarch64_appstream
qemu-kvm-device-usb-host-9.0.0-10.el9_5.aarch64.rpm19a49568133869f800f5881656b12db00ed135186e40dcd0f94fe339bc7af587-ol9_aarch64_appstream
qemu-kvm-device-usb-redirect-9.0.0-10.el9_5.aarch64.rpm2edb1af85696a2ba4ac7ae29ba8008264cdd98c29420dd033cef4889b7886816-ol9_aarch64_appstream
qemu-kvm-docs-9.0.0-10.el9_5.aarch64.rpma58142ed9fc1822f30e5b22280d80988f3bad3c7f3c0b24f6f82775484a0221e-ol9_aarch64_appstream
qemu-kvm-tools-9.0.0-10.el9_5.aarch64.rpmced05b964bc8c0e4b66d51c5b3f8cabd33afd8e558f45cddc45d7a243ae501a4-ol9_aarch64_appstream
qemu-pr-helper-9.0.0-10.el9_5.aarch64.rpmcb99975d98ff52156ad08082a3d3e45b578071fb30fa46555fdd75ae36251ac6-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) qemu-kvm-9.0.0-10.el9_5.src.rpmce9531be4b8a39f3969aaa2bdaefc2e7f246f88d97a5ee371706fb3eb7457d22-ol9_x86_64_appstream
qemu-guest-agent-9.0.0-10.el9_5.x86_64.rpme8020b499d390ab49a5fdcbfabf033492f9a9bcd6184482ad5c1b2050456c23c-ol9_x86_64_appstream
qemu-img-9.0.0-10.el9_5.x86_64.rpm8da46861d9278755c6d031e727b16134a48c70698deac5f0144b72e1c9571199-ol9_x86_64_appstream
qemu-kvm-9.0.0-10.el9_5.x86_64.rpma0e037b5089b2ef43ee9a6e6d80268e0ef7a23464f54ef103de203d227db8dbe-ol9_x86_64_appstream
qemu-kvm-audio-pa-9.0.0-10.el9_5.x86_64.rpmac59c08230fd94bf084f8a629377f714e6a1c703c976064463f8f52313828f5b-ol9_x86_64_appstream
qemu-kvm-block-blkio-9.0.0-10.el9_5.x86_64.rpmbd0f906c92c70bfcd0691272d9ad0b2db607383f55e85755287500420ddf1b00-ol9_x86_64_appstream
qemu-kvm-block-curl-9.0.0-10.el9_5.x86_64.rpm13f32193190fef73e41bc3c48bb071c5702f4a15c9679821f47c1ce183efa8a1-ol9_x86_64_appstream
qemu-kvm-block-rbd-9.0.0-10.el9_5.x86_64.rpm756b49f6d237aa612206db57ace9894a5b6fd1edaf2a8958d98024a3053ed5ee-ol9_x86_64_appstream
qemu-kvm-common-9.0.0-10.el9_5.x86_64.rpm4ea06427836782a55636fe7a173d5f66084800d1dc392dcba056c979149ded6d-ol9_x86_64_appstream
qemu-kvm-core-9.0.0-10.el9_5.x86_64.rpmaabc9292f74d9241d75439a1ea99b4ffdf37eca489cc3c2ab778f699fd1a7044-ol9_x86_64_appstream
qemu-kvm-device-display-virtio-gpu-9.0.0-10.el9_5.x86_64.rpm0cd5b3aea9b9930d916d49c357c02af10143a5dc99cf3c52005e05bef47e4495-ol9_x86_64_appstream
qemu-kvm-device-display-virtio-gpu-pci-9.0.0-10.el9_5.x86_64.rpmb05041d8358d1c47f8cc378a5cf02d61e18214cc367f077a9a09bacf914a5172-ol9_x86_64_appstream
qemu-kvm-device-display-virtio-vga-9.0.0-10.el9_5.x86_64.rpmd9a15722eaa1f1a97ef402751a6c3749cc9d1427e3f9b21e1129e88d8baa471e-ol9_x86_64_appstream
qemu-kvm-device-usb-host-9.0.0-10.el9_5.x86_64.rpm995517b6cd57911e34f6686a890f1506d7c3fd39841981542feb5fa2060677f7-ol9_x86_64_appstream
qemu-kvm-device-usb-redirect-9.0.0-10.el9_5.x86_64.rpmca7dba41143321295e5fc32006129e6481f50954147d10953bbd63b162f2191e-ol9_x86_64_appstream
qemu-kvm-docs-9.0.0-10.el9_5.x86_64.rpm51e9b2e5c443e34e136e68d03f104852f2b1b8eac8dc64a8dee45a03249436b8-ol9_x86_64_appstream
qemu-kvm-tools-9.0.0-10.el9_5.x86_64.rpm99277a5b302939b0345fbe307d36a93629d9a39744731fa403d2c85730caa8b3-ol9_x86_64_appstream
qemu-kvm-ui-egl-headless-9.0.0-10.el9_5.x86_64.rpm7037c8b8d61c7d7c96cdf5d8c9d6016595944801200be9dd15a84b7a7eeea5a8-ol9_x86_64_appstream
qemu-kvm-ui-opengl-9.0.0-10.el9_5.x86_64.rpm15c605ae84e0c117e62ff4b701c5147c9604b0ad038d70b683ddd5172dd43217-ol9_x86_64_appstream
qemu-pr-helper-9.0.0-10.el9_5.x86_64.rpmd572b549d53edaa05d7525a1aafb86c7fedf955d7f3b4b0616085cd530179b42-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete