Red Hat Security Advisory: qemu-kvm security update
Affects Red Hat qemu-kvmSource GCVE Database
0
Mentioned vulnerabilities
Severity
HighRated by Threat Radar
Data as of 13 Nov 2026, 18:32 UTC
What to do
AI-suggested
Red Hat has released a security update for the qemu-kvm package that addresses this vulnerability. Users should apply the official Red Hat security update to mitigate the issue. No additional mitigation steps are indicated in the advisory.
Description
The qemu-kvm package in Red Hat Linux addresses a speculative execution vulnerability known as CVE-2017-5715, part of the industry-wide Spectre variant 2 issue. This flaw allows an unprivileged attacker to exploit branch target injection to read privileged memory across syscall and guest/host boundaries via cache side-channel attacks. The update mitigates this vulnerability on the qemu-kvm side.
References
- access.redhat.com/errata/RHSA-2018:0026 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0026.json (opens in a new tab)
Community reviews
Loading reviews…