Red Hat Security Advisory: vdsm security update
Affects Red Hat vdsmSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:31 UTC
What to do
AI-suggested
The advisory indicates that a security update for VDSM addressing CVE-2017-5715 has been released by Red Hat. Users should apply the official Red Hat security update to mitigate this vulnerability. Since the vendor advisory is authoritative, applying the provided patches or updates is the recommended remediation. No additional mitigation steps are specified.
Description
This advisory addresses a security issue in the VDSM service used by Red Hat for virtualization management. The vulnerability relates to the speculative execution side-channel flaw known as CVE-2017-5715 (branch target injection), which can allow an unprivileged attacker to read privileged memory across syscall and guest/host boundaries via cache side-channel attacks. This issue is part of the broader Spectre vulnerabilities affecting many modern microprocessors. The advisory specifically covers the VDSM component's mitigation of CVE-2017-5715.
References
- access.redhat.com/errata/RHSA-2018:0048 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/solutions/3307851 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0048.json (opens in a new tab)