Issued:
2018-10-30
Updated:
2018-10-30

RHSA-2018:3424 - Security Advisory

Synopsis

Important: qemu-kvm security update

Type/Severity

Security Advisory: Important

Topic

An update for qemu-kvm is now available for Red Hat Enterprise Linux 6.7 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

  • An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3639 virt-ssbd AMD)

Note: This is the qemu-kvm side of the CVE-2018-3639 mitigation.

Red Hat would like to thank Ken Johnson (Microsoft Security Response Center) and Jann Horn (Google Project Zero) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 i386
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7 ppc64
  • Red Hat Enterprise Linux EUS Compute Node 6.7 x86_64
  • RHEL for SAP HANA - Extended Update Support 6.7 x86_64

Fixes

  • BZ - 1566890 - CVE-2018-3639 hw: cpu: speculative store bypass

CVEs

References

Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7

SRPM
qemu-kvm-0.12.1.2-2.479.el6_7.8.src.rpm SHA-256: 8cddd989d3cef6b5663e18db3bfbc8cae190998b1ca629b1cd2e3a90f012a43f
x86_64
qemu-guest-agent-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: b7c7c6c2a89359acd420d7591abeddc8c0a55f6d99cb1374727a4efc1bf634bc
qemu-img-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: b6061860f341b3945c33ee7a547d6f0b3a6b4f4c06101d63a8734cbfbc0b00a4
qemu-kvm-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 0916e1ba243e562dad3547eeb5d24c9c9b16ca54dea0a1a7095b75b494f934f6
qemu-kvm-debuginfo-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 1c3a3d020ff418ab40d56fe7a47c8177f11838634a8ce2bc77cacf0155dd7d3a
qemu-kvm-tools-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 2150582b05aa1d629b1e6a9ad050ab9f5e1bc928bcd1e392a097adedf62fda33
i386
qemu-guest-agent-0.12.1.2-2.479.el6_7.8.i686.rpm SHA-256: 26eef59b886414988cb288903258a746712d4e8e4a343ec6c7f1eb417b806ab5
qemu-kvm-debuginfo-0.12.1.2-2.479.el6_7.8.i686.rpm SHA-256: c1b366f9d4070fd24db24533c7acc61ea14e8af45fcc8bbb042ffaa716008fda

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7

SRPM
qemu-kvm-0.12.1.2-2.479.el6_7.8.src.rpm SHA-256: 8cddd989d3cef6b5663e18db3bfbc8cae190998b1ca629b1cd2e3a90f012a43f
ppc64
qemu-guest-agent-0.12.1.2-2.479.el6_7.8.ppc64.rpm SHA-256: 1743746c18bc2e0f3ae2e6a3b5aad559392095e6d3c2b8461b070f5b67e2242e
qemu-kvm-debuginfo-0.12.1.2-2.479.el6_7.8.ppc64.rpm SHA-256: dd176a1a6f71600cc59df7e7ba86a2db8b9abd7f2af266496001a47654945720

Red Hat Enterprise Linux EUS Compute Node 6.7

SRPM
qemu-kvm-0.12.1.2-2.479.el6_7.8.src.rpm SHA-256: 8cddd989d3cef6b5663e18db3bfbc8cae190998b1ca629b1cd2e3a90f012a43f
x86_64
qemu-guest-agent-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: b7c7c6c2a89359acd420d7591abeddc8c0a55f6d99cb1374727a4efc1bf634bc
qemu-img-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: b6061860f341b3945c33ee7a547d6f0b3a6b4f4c06101d63a8734cbfbc0b00a4
qemu-kvm-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 0916e1ba243e562dad3547eeb5d24c9c9b16ca54dea0a1a7095b75b494f934f6
qemu-kvm-debuginfo-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 1c3a3d020ff418ab40d56fe7a47c8177f11838634a8ce2bc77cacf0155dd7d3a
qemu-kvm-tools-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 2150582b05aa1d629b1e6a9ad050ab9f5e1bc928bcd1e392a097adedf62fda33

RHEL for SAP HANA - Extended Update Support 6.7

SRPM
qemu-kvm-0.12.1.2-2.479.el6_7.8.src.rpm SHA-256: 8cddd989d3cef6b5663e18db3bfbc8cae190998b1ca629b1cd2e3a90f012a43f
x86_64
qemu-guest-agent-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: b7c7c6c2a89359acd420d7591abeddc8c0a55f6d99cb1374727a4efc1bf634bc
qemu-img-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: b6061860f341b3945c33ee7a547d6f0b3a6b4f4c06101d63a8734cbfbc0b00a4
qemu-kvm-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 0916e1ba243e562dad3547eeb5d24c9c9b16ca54dea0a1a7095b75b494f934f6
qemu-kvm-debuginfo-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 1c3a3d020ff418ab40d56fe7a47c8177f11838634a8ce2bc77cacf0155dd7d3a
qemu-kvm-tools-0.12.1.2-2.479.el6_7.8.x86_64.rpm SHA-256: 2150582b05aa1d629b1e6a9ad050ab9f5e1bc928bcd1e392a097adedf62fda33

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.