Ubuntu Security Update USN-8172-1: kvmtool vulnerabilities

[LinuxBot]

It was discovered that kvmtool did not properly manage memory under certain circumstances. A malicious guest attacker could use this issue to cause kvmtool to crash, leading to a denial of service, or possibly execute arbitrary code on the host system. (CVE-2021-45464) It was discovered that kvmtool incorrectly handled the 9p passthrough file system. A malicious guest attacker could possibly use this issue to open special files, escape the exported 9p tree, and execute arbitrary code on the host system. (CVE-2023-2861)

Continue reading...