FlawAtlas
Search the atlas
ALSA-2022:5821 Not scored

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow (CVE-2021-4206) * QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow (CVE-2021-4207) * QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353) * QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux 9.0 guest with vsock device migration failed from AlmaLinux 9.0 > AlmaLinux 8.6 (BZ#2071103) * Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs) (BZ#2072242) * Remove upstream-only devices from the qemu-kvm binary (BZ#2077928) * When doing a cpu-baseline between skylake and cascadelake, cascadelake is selected as baseline. (BZ#2084030) * Virt-v2v can't convert rhel8.6 guest from VMware on rhel8.6 (BZ#2093415) Enhancement(s): * Allow memory prealloc from multiple threads (BZ#2075569)

Exploit probability Not scored
Published August 2, 2022
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

AlmaLinux:8 virt-v2v
AlmaLinux:8 perl-Sys-Guestfs
AlmaLinux:8 ocaml-libguestfs-devel
AlmaLinux:8 nbdkit-xz-filter
AlmaLinux:8 libvirt-wireshark
AlmaLinux:8 libvirt-daemon
AlmaLinux:8 libvirt-daemon-driver-nodedev
AlmaLinux:8 libvirt-daemon-driver-secret
AlmaLinux:8 python3-libnbd
AlmaLinux:8 nbdkit-tmpdisk-plugin
AlmaLinux:8 sgabios
AlmaLinux:8 libvirt-nss
AlmaLinux:8 nbdkit-tar-plugin
AlmaLinux:8 ruby-hivex
AlmaLinux:8 ruby-libguestfs
AlmaLinux:8 libvirt-daemon-kvm
AlmaLinux:8 sgabios-bin
AlmaLinux:8 libguestfs-gfs2
AlmaLinux:8 qemu-kvm-block-ssh
AlmaLinux:8 libguestfs-winsupport
AlmaLinux:8 nbdkit-example-plugins
AlmaLinux:8 qemu-kvm-block-rbd
AlmaLinux:8 supermin
AlmaLinux:8 python3-libvirt
AlmaLinux:8 libvirt-libs
AlmaLinux:8 libguestfs-bash-completion
AlmaLinux:8 qemu-kvm
AlmaLinux:8 swtpm
AlmaLinux:8 libguestfs-appliance
AlmaLinux:8 libvirt
AlmaLinux:8 libguestfs-java-devel
AlmaLinux:8 perl-hivex
AlmaLinux:8 virt-v2v-bash-completion
AlmaLinux:8 libvirt-daemon-driver-storage-logical
AlmaLinux:8 nbdkit-basic-plugins
AlmaLinux:8 virt-v2v-man-pages-ja
AlmaLinux:8 libguestfs-javadoc
AlmaLinux:8 nbdkit-nbd-plugin
AlmaLinux:8 netcf-libs
AlmaLinux:8 swtpm-tools
AlmaLinux:8 perl-Sys-Virt
AlmaLinux:8 libvirt-daemon-driver-storage-scsi
AlmaLinux:8 python3-libguestfs
AlmaLinux:8 libguestfs-gobject-devel
AlmaLinux:8 libtpms-devel
AlmaLinux:8 qemu-kvm-docs
AlmaLinux:8 ocaml-libguestfs
AlmaLinux:8 seabios-bin
AlmaLinux:8 libguestfs-gobject
AlmaLinux:8 nbdkit-ssh-plugin
AlmaLinux:8 nbdkit-basic-filters
AlmaLinux:8 nbdkit-bash-completion
AlmaLinux:8 libvirt-lock-sanlock
AlmaLinux:8 libguestfs-rescue
AlmaLinux:8 libiscsi
AlmaLinux:8 python3-hivex
AlmaLinux:8 swtpm-devel
AlmaLinux:8 libvirt-daemon-driver-storage-gluster
AlmaLinux:8 swtpm-libs
AlmaLinux:8 ocaml-hivex-devel
AlmaLinux:8 ocaml-libnbd
AlmaLinux:8 nbdkit
AlmaLinux:8 nbdkit-devel
AlmaLinux:8 libvirt-daemon-driver-storage-rbd
AlmaLinux:8 lua-guestfs
AlmaLinux:8 libguestfs-tools
AlmaLinux:8 libvirt-daemon-config-network
AlmaLinux:8 nbdfuse
AlmaLinux:8 nbdkit-python-plugin
AlmaLinux:8 qemu-kvm-ui-spice
AlmaLinux:8 libguestfs-rsync
AlmaLinux:8 libvirt-dbus
AlmaLinux:8 libvirt-docs
AlmaLinux:8 qemu-img
AlmaLinux:8 libguestfs-tools-c
AlmaLinux:8 netcf
AlmaLinux:8 hivex-devel
AlmaLinux:8 qemu-kvm-block-iscsi
AlmaLinux:8 libvirt-daemon-driver-storage-disk
AlmaLinux:8 nbdkit-tar-filter
AlmaLinux:8 nbdkit-vddk-plugin
AlmaLinux:8 libvirt-daemon-driver-storage-iscsi
AlmaLinux:8 SLOF
AlmaLinux:8 libvirt-daemon-driver-nwfilter
AlmaLinux:8 libvirt-devel
AlmaLinux:8 qemu-kvm-ui-opengl
AlmaLinux:8 qemu-kvm-tests
AlmaLinux:8 libguestfs-man-pages-uk
AlmaLinux:8 libvirt-client
AlmaLinux:8 qemu-kvm-hw-usbredir
AlmaLinux:8 libnbd
AlmaLinux:8 libguestfs-man-pages-ja
AlmaLinux:8 libnbd-bash-completion
AlmaLinux:8 libvirt-daemon-driver-network
AlmaLinux:8 virt-dib
AlmaLinux:8 libvirt-daemon-driver-storage-core
AlmaLinux:8 hivex
AlmaLinux:8 ocaml-hivex
AlmaLinux:8 nbdkit-server
AlmaLinux:8 libnbd-devel
AlmaLinux:8 seabios
AlmaLinux:8 qemu-kvm-block-gluster
AlmaLinux:8 qemu-kvm-core
AlmaLinux:8 libvirt-daemon-driver-qemu
AlmaLinux:8 libvirt-daemon-config-nwfilter
AlmaLinux:8 libguestfs-xfs
AlmaLinux:8 libiscsi-devel
AlmaLinux:8 nbdkit-curl-plugin
AlmaLinux:8 libiscsi-utils
AlmaLinux:8 swtpm-tools-pkcs11
AlmaLinux:8 libvirt-daemon-driver-storage-iscsi-direct
AlmaLinux:8 nbdkit-gzip-filter
AlmaLinux:8 supermin-devel
AlmaLinux:8 libvirt-daemon-driver-storage
AlmaLinux:8 qemu-guest-agent
AlmaLinux:8 libtpms
AlmaLinux:8 libguestfs
AlmaLinux:8 libvirt-daemon-driver-storage-mpath
AlmaLinux:8 libguestfs-inspect-icons
AlmaLinux:8 ocaml-libnbd-devel
AlmaLinux:8 netcf-devel
AlmaLinux:8 libguestfs-java
AlmaLinux:8 qemu-kvm-common
AlmaLinux:8 nbdkit-linuxdisk-plugin
AlmaLinux:8 libvirt-daemon-driver-interface
AlmaLinux:8 nbdkit-gzip-plugin
AlmaLinux:8 qemu-kvm-block-curl
AlmaLinux:8 seavgabios-bin
AlmaLinux:8 virt-v2v-man-pages-uk
AlmaLinux:8 libguestfs-devel

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities ALSA-2022:5821

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow (CVE-2021-4206) * QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow (CVE-2021-4207) * QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353) * QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux 9.0 guest with vsock device migration failed from AlmaLinux 9.0 > AlmaLinux 8.6 (BZ#2071103) * Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs) (BZ#2072242) * Remove upstream-only devices from the qemu-kvm binary (BZ#2077928) * When doing a cpu-baseline between skylake and cascadelake, cascadelake is selected as baseline. (BZ#2084030) * Virt-v2v can't convert rhel8.6 guest from VMware on rhel8.6 (BZ#2093415) Enhancement(s): * Allow memory prealloc from multiple threads (BZ#2075569)

View original source

05 / REFERENCES

Further evidence