RHSA-2026:18479 - Security Advisory

Topic

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

• firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)
• firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)
• firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)
• firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699)
• firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695)
• firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 10 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64
• Red Hat Enterprise Linux for IBM z Systems 10 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x
• Red Hat Enterprise Linux for Power, little endian 10 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le
• Red Hat Enterprise Linux for ARM 64 10 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x
• Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le
• Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64
• Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le
• Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x

Fixes

• BZ - 2328941 - CVE-2024-11694 firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
• BZ - 2328943 - CVE-2024-11696 firefox: thunderbird: Unhandled Exception in Add-on Signature Verification
• BZ - 2328946 - CVE-2024-11692 firefox: thunderbird: Select list elements could be shown over another site
• BZ - 2328947 - CVE-2024-11699 firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5
• BZ - 2328948 - CVE-2024-11695 firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters
• BZ - 2328950 - CVE-2024-11697 firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog
• RHEL-110003 - Expose block limits of block nodes in QMP and qemu-img
• RHEL-120115 - The vf nic created using the IGB emulated nic can not obtain ip address
• RHEL-121543 - The VM hit io error when do S3-PR integration on the pass-through failover multipath device
• RHEL-129540 - Assertion failure on drain with iothread and I/O load
• RHEL-130478 - Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace
• RHEL-130704 - [rhel10] Fix the typo under vfio-pci device's enable-migration option
• RHEL-126707 - [qemu, rhel-10] increase default TSEG size
• RHEL-143785 - backport support for GSO over UDP tunnel offload
• RHEL-101929 - enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt
• RHEL-105828 - Add new -rhel10.2.0 machine type to qemu-kvm [x86_64]
• RHEL-116443 - qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i]
• RHEL-119368 - [rhel10] Backport "arm/kvm: report registers we failed to set"
• RHEL-120253 - Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility
• RHEL-126573 - [RHEL 10.2] VFIO migration using multifd should be disabled by default
• RHEL-71834 - Support more than one pxe boot entry
• RHEL-79118 - [network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]
• RHEL-81894 - Support live migration in qemu-vdagent
• RHEL-88788 - [arm64] (qemu) rom: file vgabios-ramfb.bin : error Failed to open file ?vgabios-ramfb.bin?: No such file or directory
• RHEL-94534 - [virtiofs]qemu coredumped during migration while the virtiofsd daemon is down[rhel10.1]
• RHEL-132749 - Migrate SCSI PR state and preempt reservation upon live migration
• RHEL-134989 - Hotplugged interface device can not be shown in the guest
• RHEL-146584 - [RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest
• RHEL-144004 - [rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting
• RHEL-153058 - Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot
• RHEL-155601 - Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]

CVEs

• CVE-2024-11692
• CVE-2024-11694
• CVE-2024-11695
• CVE-2024-11696
• CVE-2024-11697
• CVE-2024-11699

References

• https://access.redhat.com/security/updates/classification/#important
• https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index