Most recent entries from all

ALSA-2024:4351 — Low: virt:rhel and virt-devel:rhel security and bug fix update

Affected: AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix:

* virt:rhel/libvirt: stack use-after-free in virNetClientIOEventLoop (CVE-2024-4418)

Bug fix:

* virsh destroy with --graceful destroyed a paused guest (qemu process paused by SIGSTOP) (JIRA:AlmaLinux-36064)

bdu:2024-04436

BELL-CVE-2024-4418

Affected: Alpaquita:stream: libvirt

EUVD-2026-270736

fkie_cve-2024-4418

A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's stack frame was concurrently being "freed" when returning from virNetClientIOEventLoop(). The 'virtproxyd' daemon can be used to trigger requests. If libvirt is configured with fine-grained access control, this issue, in theory, allows a user to escape their otherwise limited access. This flaw allows a local, unprivileged user to access virtproxyd without authenticating. Remote users would need to authenticate before they could access it.

GHSA-q262-3hfr-f5q4

msrc_CVE-2024-4418 — Libvirt: stack use-after-free in virnetclientioeventloop()

msrc_CVE-2024-4418

OESA-2024-1683 — libvirt security update

Affected: openEuler:20.03-LTS-SP1: libvirt, openEuler:20.03-LTS-SP4: libvirt, openEuler:22.03-LTS: libvirt, openEuler:22.03-LTS-SP1: libvirt, openEuler:22.03-LTS-SP2: libvirt, openEuler:22.03-LTS-SP3: libvirt

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es): A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's stack frame was concurrently being "freed" when returning from virNetClientIOEventLoop(). The 'virtproxyd' daemon can be used to trigger requests. If libvirt is configured with fine-grained access control, this issue, in theory, allows a user to escape their otherwise limited access. This flaw allows a local, unprivileged user to access virtproxyd without authenticating. Remote users would need to authenticate before they could access it.(CVE-2024-4418)

openSUSE-SU-2024:13948-1 — libvirt-10.3.0-2.1 on GA media

libvirt-10.3.0-2.1 on GA media

RHSA-2024:4351 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update

libvirt: stack use-after-free in virNetClientIOEventLoop()

SUSE-SU-2024:1962-1 — Security update for libvirt

Security update for libvirt

UBUNTU-CVE-2024-4418

Affected: Ubuntu:24.04:LTS: libvirt

WID-SEC-W-2024-1017 — Red Hat Enterprise Linux (libvirt): Schwachstelle ermöglicht Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.