HighFix available
Red Hat Security Advisory: qemu-kvm security update
Type: advisorySources: OSV
- Products
- qemu-guest-agent, qemu-guest-agent-debuginfo, qemu-img, qemu-img-debuginfo, qemu-kvm, qemu-kvm-audio-dbus-debuginfo, qemu-kvm-audio-pa, qemu-kvm-audio-pa-debuginfo, qemu-kvm-block-blkio, qemu-kvm-block-blkio-debuginfo, qemu-kvm-block-curl, qemu-kvm-block-curl-debuginfo, qemu-kvm-block-rbd, qemu-kvm-block-rbd-debuginfo, qemu-kvm-common, qemu-kvm-common-debuginfo, qemu-kvm-core, qemu-kvm-core-debuginfo, qemu-kvm-debuginfo, qemu-kvm-debugsource, qemu-kvm-device-display-virtio-gpu, qemu-kvm-device-display-virtio-gpu-ccw, qemu-kvm-device-display-virtio-gpu-ccw-debuginfo, qemu-kvm-device-display-virtio-gpu-debuginfo, qemu-kvm-device-display-virtio-gpu-pci, qemu-kvm-device-display-virtio-gpu-pci-debuginfo, qemu-kvm-device-display-virtio-vga, qemu-kvm-device-display-virtio-vga-debuginfo, qemu-kvm-device-usb-host, qemu-kvm-device-usb-host-debuginfo, qemu-kvm-device-usb-redirect, qemu-kvm-device-usb-redirect-debuginfo, qemu-kvm-docs, qemu-kvm-tests-debuginfo, qemu-kvm-tools, qemu-kvm-tools-debuginfo, qemu-kvm-ui-dbus-debuginfo, qemu-kvm-ui-egl-headless, qemu-kvm-ui-egl-headless-debuginfo, qemu-kvm-ui-opengl, qemu-kvm-ui-opengl-debuginfo, qemu-pr-helper, qemu-pr-helper-debuginfo
- Affected versions
- Not specified
- Fixed versions
- 17:9.0.0-10.el9_5
- CVEs
- CVE-2024-26327, CVE-2024-3446, CVE-2024-7409
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 11:13 UTC · Revision 1
Source evidence
Red Hat Security Advisory: qemu-kvm security update
core-osv · Original sourcePublished 15 Nov 2024, 18:46 UTC
Red Hat Security Advisory: qemu-kvm security update
osv:RHSA-2024:9136
qemu-guest-agent
Fixed versions: 17:9.0.0-10.el9_5
qemu-guest-agent-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-img
Fixed versions: 17:9.0.0-10.el9_5
qemu-img-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-audio-dbus-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-audio-pa
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-audio-pa-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-block-blkio
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-block-blkio-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-block-curl
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-block-curl-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-block-rbd
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-block-rbd-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-common
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-common-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-core
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-core-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-debugsource
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-gpu
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-gpu-ccw
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-gpu-ccw-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-gpu-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-gpu-pci
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-gpu-pci-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-vga
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-display-virtio-vga-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-usb-host
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-usb-host-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-usb-redirect
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-device-usb-redirect-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-docs
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-tests-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-tools
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-tools-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-ui-dbus-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-ui-egl-headless
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-ui-egl-headless-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-ui-opengl
Fixed versions: 17:9.0.0-10.el9_5
qemu-kvm-ui-opengl-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
qemu-pr-helper
Fixed versions: 17:9.0.0-10.el9_5
qemu-pr-helper-debuginfo
Fixed versions: 17:9.0.0-10.el9_5
Complete source record
{
"id": "bf1e4137ff99ae296bef07404e8ee18a37ea02fadfd90637709f4920c837988b",
"url": "https://osv.dev/vulnerability/RHSA-2024%3A9136",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: qemu-kvm security update",
"summary": "Red Hat Security Advisory: qemu-kvm security update",
"evidence": "osv:RHSA-2024:9136",
"products": [
{
"name": {
"value": "qemu-guest-agent",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-guest-agent-debuginfo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-img",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-img-debuginfo",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-audio-dbus-debuginfo",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-audio-pa",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-audio-pa-debuginfo",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-block-blkio",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-block-blkio-debuginfo",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-block-curl",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-block-curl-debuginfo",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-block-rbd",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-block-rbd-debuginfo",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-common",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-common-debuginfo",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-core",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-core-debuginfo",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-debuginfo",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-debugsource",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-gpu",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-gpu-ccw",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-gpu-ccw-debuginfo",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-gpu-debuginfo",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-gpu-pci",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-gpu-pci-debuginfo",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-vga",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-display-virtio-vga-debuginfo",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-usb-host",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-usb-host-debuginfo",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/29/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-usb-redirect",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/30/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-device-usb-redirect-debuginfo",
"evidence": "/affected/31/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/31/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-docs",
"evidence": "/affected/32/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/32/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-tests-debuginfo",
"evidence": "/affected/33/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/33/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-tools",
"evidence": "/affected/34/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/34/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-tools-debuginfo",
"evidence": "/affected/35/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/35/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-ui-dbus-debuginfo",
"evidence": "/affected/36/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/36/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-ui-egl-headless",
"evidence": "/affected/37/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/37/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-ui-egl-headless-debuginfo",
"evidence": "/affected/38/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/38/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-ui-opengl",
"evidence": "/affected/39/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/39/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-kvm-ui-opengl-debuginfo",
"evidence": "/affected/40/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/40/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-pr-helper",
"evidence": "/affected/41/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/41/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "qemu-pr-helper-debuginfo",
"evidence": "/affected/42/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17:9.0.0-10.el9_5",
"evidence": "/affected/42/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2024:9136",
"aliases": [
"RHSA-2024:9136"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-guest-agent",
"purl": "pkg:rpm/redhat/qemu-guest-agent",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-guest-agent-debuginfo",
"purl": "pkg:rpm/redhat/qemu-guest-agent-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-img",
"purl": "pkg:rpm/redhat/qemu-img",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-img-debuginfo",
"purl": "pkg:rpm/redhat/qemu-img-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm",
"purl": "pkg:rpm/redhat/qemu-kvm",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-audio-dbus-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-audio-dbus-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-audio-pa",
"purl": "pkg:rpm/redhat/qemu-kvm-audio-pa",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-audio-pa-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-audio-pa-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-block-blkio",
"purl": "pkg:rpm/redhat/qemu-kvm-block-blkio",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-block-blkio-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-block-blkio-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-block-curl",
"purl": "pkg:rpm/redhat/qemu-kvm-block-curl",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-block-curl-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-block-curl-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-block-rbd",
"purl": "pkg:rpm/redhat/qemu-kvm-block-rbd",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-block-rbd-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-block-rbd-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-common",
"purl": "pkg:rpm/redhat/qemu-kvm-common",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-common-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-common-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-core",
"purl": "pkg:rpm/redhat/qemu-kvm-core",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-core-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-core-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-debugsource",
"purl": "pkg:rpm/redhat/qemu-kvm-debugsource",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-gpu",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-gpu-ccw",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-ccw",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-gpu-ccw-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-ccw-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-gpu-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-gpu-pci",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-pci",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-gpu-pci-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-pci-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-vga",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-vga",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-display-virtio-vga-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-vga-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-usb-host",
"purl": "pkg:rpm/redhat/qemu-kvm-device-usb-host",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-usb-host-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-device-usb-host-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-usb-redirect",
"purl": "pkg:rpm/redhat/qemu-kvm-device-usb-redirect",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-device-usb-redirect-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-device-usb-redirect-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-docs",
"purl": "pkg:rpm/redhat/qemu-kvm-docs",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-tests-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-tests-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-tools",
"purl": "pkg:rpm/redhat/qemu-kvm-tools",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-tools-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-tools-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-ui-dbus-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-ui-dbus-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-ui-egl-headless",
"purl": "pkg:rpm/redhat/qemu-kvm-ui-egl-headless",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-ui-egl-headless-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-ui-egl-headless-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-ui-opengl",
"purl": "pkg:rpm/redhat/qemu-kvm-ui-opengl",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-kvm-ui-opengl-debuginfo",
"purl": "pkg:rpm/redhat/qemu-kvm-ui-opengl-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-pr-helper",
"purl": "pkg:rpm/redhat/qemu-pr-helper",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17:9.0.0-10.el9_5"
}
]
}
],
"package": {
"name": "qemu-pr-helper-debuginfo",
"purl": "pkg:rpm/redhat/qemu-pr-helper-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:9::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2024:9136.json"
}
}
],
"modified": "2026-10-09T10:12:51Z",
"provider": "osv",
"upstream": [
"CVE-2024-26327",
"CVE-2024-3446",
"CVE-2024-7409"
],
"references": [
"https://access.redhat.com/errata/RHSA-2024:9136",
"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
"https://access.redhat.com/security/updates/classification/#moderate",
"https://bugzilla.redhat.com/show_bug.cgi?id=2264844",
"https://bugzilla.redhat.com/show_bug.cgi?id=2274211",
"https://bugzilla.redhat.com/show_bug.cgi?id=2302487",
"https://issues.redhat.com/browse/RHEL-17719",
"https://issues.redhat.com/browse/RHEL-21695",
"https://issues.redhat.com/browse/RHEL-24024",
"https://issues.redhat.com/browse/RHEL-28073",
"https://issues.redhat.com/browse/RHEL-28686",
"https://issues.redhat.com/browse/RHEL-28813",
"https://issues.redhat.com/browse/RHEL-30362",
"https://issues.redhat.com/browse/RHEL-33440",
"https://issues.redhat.com/browse/RHEL-33889",
"https://issues.redhat.com/browse/RHEL-34618",
"https://issues.redhat.com/browse/RHEL-34621",
"https://issues.redhat.com/browse/RHEL-34945",
"https://issues.redhat.com/browse/RHEL-36159",
"https://issues.redhat.com/browse/RHEL-38697",
"https://issues.redhat.com/browse/RHEL-40708",
"https://issues.redhat.com/browse/RHEL-42411",
"https://issues.redhat.com/browse/RHEL-50000",
"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9136.json",
"https://access.redhat.com/security/cve/CVE-2024-3446",
"https://www.cve.org/CVERecord?id=CVE-2024-3446",
"https://nvd.nist.gov/vuln/detail/CVE-2024-3446",
"https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/",
"https://access.redhat.com/security/cve/CVE-2024-7409",
"https://www.cve.org/CVERecord?id=CVE-2024-7409",
"https://nvd.nist.gov/vuln/detail/CVE-2024-7409",
"https://access.redhat.com/security/cve/CVE-2024-26327",
"https://www.cve.org/CVERecord?id=CVE-2024-26327",
"https://nvd.nist.gov/vuln/detail/CVE-2024-26327",
"https://lore.kernel.org/all/20240214-reuse-v4-5-89ad093a07f4@daynix.com/"
]
},
"related_cves": [
{
"value": "CVE-2024-26327",
"evidence": "/upstream"
},
{
"value": "CVE-2024-3446",
"evidence": "/upstream"
},
{
"value": "CVE-2024-7409",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 112210,
"published_at": "2024-11-15T18:46:28+00:00"
}