Red Hat Security Advisory: qemu-kvm-rhev security update
Affects Red Hat qemu-kvm-rhevSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:32 UTC
What to do
AI-suggested
The advisory indicates that a security fix addressing the qemu-kvm-rhev component of CVE-2017-5715 has been issued by Red Hat. Users should apply the official Red Hat security update for qemu-kvm-rhev to mitigate this vulnerability. No additional mitigation guidance is provided in the input data.
Description
The qemu-kvm-rhev package in Red Hat provides user-space components for KVM virtualization. It is affected by a speculative execution vulnerability known as CVE-2017-5715 (branch target injection), which allows an unprivileged attacker to read privileged memory across syscall and guest/host boundaries via targeted cache side-channel attacks. This issue arises from how modern microprocessors implement speculative execution. The advisory addresses the qemu-kvm-rhev side of the mitigation for this vulnerability.
References
- access.redhat.com/errata/RHSA-2018:0025 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0025.json (opens in a new tab)