RHSA-2023:6368 - Security Advisory

Topic

An update for qemu-kvm is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

The following packages have been upgraded to a later upstream version: qemu-kvm (8.0.0). (BZ#2180898)

Security Fix(es):

• QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) (CVE-2023-2680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.6 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

• BZ - 1886123 - [RFE] Supporting vDPA block in QEMU
• BZ - 1934134 - ACPI table limits warning when booting guest with 512 VCPUs
• BZ - 1946716 - RFE: support setting ACPI index for PCI devices to enable systemd predictable NIC device naming
• BZ - 1947230 - Enable QEMU support for io_uring in RHEL9
• BZ - 2040509 - [RFE]:Add support for changing "tx_queue_size" to a setable value
• BZ - 2046606 - [RFE] Postcopy Preemption
• BZ - 2057267 - Migration with postcopy fail when vm set with shared memory
• BZ - 2058982 - Qemu core dump if cut off nfs storage during migration
• BZ - 2084442 - watchdog: BUG: soft lockup - CPU# stuck for ... - no watchdog action
• BZ - 2087047 - Disk detach is unsuccessful while the guest is still booting
• BZ - 2090998 - [qemu-kvm] rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization
• BZ - 2106726 - Qemu on destination host crashed if migrate with postcopy and multifd enabled
• BZ - 2124756 - qemu-kvm crashed when starting guest with cputune + kvm dirty-ring enabled
• BZ - 2128929 - [rhel9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest
• BZ - 2141965 - [TPM][vhost-vdpa][rhel9.2]Boot a guest with "vhost-vdpa + TPM emulator", qemu output: qemu-kvm: vhost_vdpa_listener_region_add received unaligned region
• BZ - 2158430 - Measured AMD SEV-ES guest boot with kernel/initrd failed with failed to load Boot0003 "Grub Bootloader" from Fv/Fv file
• BZ - 2165917 - qemu-kvm: contrib/elf2dmp: Windows Server 2022 support
• BZ - 2167838 - qemu: qemu_mutex_unlock_impl: Operation not permitted
• BZ - 2174676 - Guest hit EXT4-fs error on host 4K disk when repeatedly hot-plug/unplug running IO disk [RHEL9]
• BZ - 2176702 - [RHEL9][virtio-scsi] scsi-hd cannot hot-plug successfully after hot-plug it repeatly
• BZ - 2176926 - qemu crash on void blk_drain(BlockBackend *): Assertion qemu_in_main_thread() failed [rhel-9.3.0]
• BZ - 2177620 - [mlx vhost_vdpa][rhel 9.2]qemu core dump when hot unplug then hotplug a vdpa interface with multi-queue setting
• BZ - 2179033 - bugs in emulation of BMI instructions (for libguestfs without KVM) [rhel-9.3.0]
• BZ - 2180076 - [qemu-kvm] support fd passing for libblkio QEMU BlockDrivers
• BZ - 2180806 - Update machine type compatibility for QEMU 8.0.0 update [x86_64]
• BZ - 2180898 - Rebase to QEMU 8.0.0 for RHEL 9.3.0
• BZ - 2185688 - [qemu-kvm] no response with QMP command block_resize
• BZ - 2186725 - Qemu hang when commit during fio running(iothread enable)
• BZ - 2189423 - Failed to migrate VM from rhel 9.3 to rhel 9.2
• BZ - 2196289 - Fix number of ready channels on multifd
• BZ - 2203387 - CVE-2023-2680 QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750)
• BZ - 2203512 - [qemu-kvm] detect_zeros=unmap causes postgres to crash
• BZ - 2207940 - [RFE] Enable qemu-ui-dbus subpackage
• BZ - 2211609 - With virtio-iommu and vfio-pci, qemu reports "warning: virtio-iommu page mask 0xfffffffffffff000 does not match 0x40201000"
• BZ - 2211634 - [aarch64] With virtio-iommu and vfio-pci, qemu coredump when host using kernel-64k package
• BZ - 2213317 - Enable libblkio-based block drivers in QEMU
• BZ - 2215819 - Migration test failed while guest with PCIe devices
• BZ - 2216201 - [qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode
• BZ - 2218644 - query-stats QMP command interrupts vcpus, the Max Latencies could be more than 100us (rhel 9.3.0 clone)
• BZ - 2219224 - VFIO: qemu-kvm core dumped after hot-plugging a xres=1 VF into the vm
• BZ - 2220866 - Misaligned symbol for s390-ccw image during qemu-kvm build
• BZ - 2222579 - PNG screendump doesn't save screen correctly
• BZ - 2223691 - [machine type 9.2]Failed to migrate VM from RHEL 9.3 to RHEL 9.2
• BZ - 2225354 - [vdpa-blk] The new driver virtio-blk-vhost-user not work in VM booting
• BZ - 2225439 - [vdpa-blk] read-only=on option not work on driver virtio-blk-vhost-vdpa
• BZ - 2229133 - Backport some virtio-iommu and smmu fixes
• BZ - 2229868 - [vfio migration]Disable postcopy for VM with migratable vfio device
• RHEL-1218 - Boot guest with e1000e, value of "/sys/class/net/$nic/operstate" is wrongly showed as "up" after "(qemu) set_link net0 off"

CVEs

• CVE-2023-2680

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index