VDB
ALSA-2024%3A4278
ALSA-2024%3A4278
PUBLISHED
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write (CVE-2024-4467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci | 0, 0 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga | 0, 0 |
| AlmaLinux:9 | qemu-kvm-audio-pa | 0, 0 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu | 0, 0 |
| AlmaLinux:9 | qemu-img | 0, 0 |
| AlmaLinux:9 | qemu-kvm-docs | 0, 0 |
| AlmaLinux:9 | qemu-kvm-common | 0, 0 |
| AlmaLinux:9 | qemu-kvm-tools | 0, 0 |
| AlmaLinux:9 | qemu-kvm-block-blkio | 0, 0 |
| AlmaLinux:9 | qemu-kvm-device-usb-host | 0, 0 |
| AlmaLinux:9 | qemu-guest-agent | 0, 0 |
| AlmaLinux:9 | qemu-pr-helper | 0, 0 |
| AlmaLinux:9 | qemu-kvm-core | 0, 0 |
| AlmaLinux:9 | qemu-kvm-ui-opengl | 0, 0 |
| AlmaLinux:9 | qemu-kvm-block-rbd | 0, 0 |
| AlmaLinux:9 | qemu-kvm-device-usb-redirect | 0, 0 |
| AlmaLinux:9 | qemu-kvm | 0, 0 |
| AlmaLinux:9 | qemu-kvm-block-curl | 0, 0 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-ccw | 0, 0 |
| AlmaLinux:9 | qemu-kvm-ui-egl-headless | 0, 0 |
Timeline
- Jul 2, 2024 CVE Published
- Jul 3, 2024 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:4278 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-4467 third-party-advisory
- https://bugzilla.redhat.com/2278875 third-party-advisory
- https://errata.almalinux.org/9/ALSA-2024-4278.html vendor-advisory