Red Hat Security Advisory: qemu-kvm-rhev security update

The Red Hat qemu-kvm-rhev package was updated to address a speculative execution vulnerability known as CVE-2017-5715 (Spectre Variant 2). This flaw involves branch target injection that allows an unprivileged attacker to read privileged memory across syscall and guest/host boundaries via cache side-channel attacks. The update mitigates this issue in the user-space component of KVM virtualization environments managed by Red Hat products. No public exploit or in-the-wild exploitation is reported for this specific update.

• access.redhat.com/errata/RHSA-2018:0060 (opens in a new tab)
• access.redhat.com/security/updates/classification/ (opens in a new tab)
• access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
• access.redhat.com/solutions/3307851 (opens in a new tab)
• access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=1525497 (opens in a new tab)
• security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0060.json (opens in a new tab)

• Red Hat Security Advisory: webkit2gtk3 security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: opentelemetry-collector security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: libxslt security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: expat security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: grafana security update from RHELLowVulnerability2025-10-21