CESA-2021:0347 -- centos 7 qemu-kvmID: oval:org.secpod.oval:def:205835 | Date: (C)2021-02-24 (M)2023-11-10 |
Class: PATCH | Family: unix |
Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix: * QEMU: loader: OOB access while loading registered ROM may lead to code execution * QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Bug Fix: * qemu-kvm FTBFS on rhel7.9