Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
Affects Red Hat qemu-kvm-rhevSource GCVE Database
Rated by Threat Radar
Data as of 13 Nov 2026, 19:17 UTC
What to do
AI-suggested
Upgrade to the updated qemu-kvm-rhev packages containing the backported patches. After upgrading, shut down all running virtual machines and restart them for the update to take effect. Manually stop the qemu-ga service and remove or adjust permissions on existing log files and UNIX domain socket files to remove group and other write permissions, as the update does not change existing file permissions automatically. Note that files created by the guest-file-open QEMU Monitor Protocol command will continue to have world-writable permissions for backward compatibility.
Description
A vulnerability in the QEMU Guest Agent (qemu-ga) component of qemu-kvm-rhev allows unprivileged guest users to create files with world-writable permissions, potentially consuming all free space on the partition or modifying log contents. When a UNIX domain socket transport is explicitly configured, this flaw could allow privilege escalation within the guest. The update requires manual action to fix existing file permissions. Additional bug fixes address memory size reporting and network card link status issues.