# CVE-2021-3638: qemu: An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU

CVE-2021-3638 is fixed in 141 products on 1 platform, first by DEBIAN-CVE-2021-3638, released March 3, 2022. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2021-3638
- Priority: Routine
- CVSS: 6.5 (medium)
- EPSS: 0.0043
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 3, 2022

## Description

An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | hivex-devel ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-appliance ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-bash-completion ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-benchmarking ol 8 | 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab | [ELSA-2023-12108](https://patchblox.com/security/data/fix/linux/elsa-2023-12108.md) | Feb 8, 2023 |
| Linux | libguestfs-devel ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-gfs2 ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-gobject ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-gobject-devel ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-inspect-icons ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-java ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-java-devel ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-javadoc ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-man-pages-ja ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-man-pages-uk ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-rescue ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-rsync ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-tools ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-tools-c ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-winsupport ol 8 | 0:8.6-1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libguestfs-xfs ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libiscsi ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libiscsi-devel ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libiscsi-utils ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libnbd ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libnbd-bash-completion ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libnbd-devel ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libtpms ol 8 | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libtpms-devel ol 8 | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-admin ol 8 | 0:5.7.0-38.module+el8.7.0+20894+2d7709ab | [ELSA-2023-12108](https://patchblox.com/security/data/fix/linux/elsa-2023-12108.md) | Feb 8, 2023 |
| Linux | libvirt-bash-completion ol 8 | 0:5.7.0-38.module+el8.7.0+20894+2d7709ab | [ELSA-2023-12108](https://patchblox.com/security/data/fix/linux/elsa-2023-12108.md) | Feb 8, 2023 |
| Linux | libvirt-client ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-config-network ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-config-nwfilter ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-interface ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-network ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-nodedev ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-nwfilter ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-qemu ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-secret ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-core ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-disk ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-gluster ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-iscsi ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-iscsi-direct ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-logical ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-mpath ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-rbd ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-driver-storage-scsi ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-daemon-kvm ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-dbus ol 8 | 0:1.3.0-2.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-devel ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-docs ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-libs ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-lock-sanlock ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-nss ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | libvirt-wireshark ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | lua-guestfs ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdfuse ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-bash-completion ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-basic-filters ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-basic-plugins ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-curl-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-devel ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-example-plugins ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-gzip-filter ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-gzip-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-linuxdisk-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-nbd-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-python-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-server ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-ssh-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-tar-filter ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-tar-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-tmpdisk-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-vddk-plugin ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | nbdkit-xz-filter ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | netcf ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | netcf-devel ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | netcf-libs ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | perl-Sys-Guestfs ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | perl-Sys-Virt ol 8 | 0:6.0.0-1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | perl-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | python3-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | python3-libguestfs ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | python3-libnbd ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | python3-libvirt ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu Debian 12.15 (bookworm) | 1:6.1+dfsg-6 | [DEBIAN-CVE-2021-3638](https://patchblox.com/security/data/fix/linux/debian-cve-2021-3638.md) | Mar 3, 2022 |
| Linux | qemu Debian 13.5 (trixie) | 1:6.1+dfsg-6 | [DEBIAN-CVE-2021-3638](https://patchblox.com/security/data/fix/linux/debian-cve-2021-3638.md) | Mar 3, 2022 |
| Linux | qemu Debian 14 | 1:6.1+dfsg-6 | [DEBIAN-CVE-2021-3638](https://patchblox.com/security/data/fix/linux/debian-cve-2021-3638.md) | Mar 3, 2022 |
| Linux | qemu Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-block-extra Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-block-extra 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-block-extra-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-guest-agent Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-guest-agent 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-guest-agent-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-guest-agent ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-img ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-kvm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-kvm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-kvm ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm-block-curl ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm-block-gluster ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm-block-iscsi ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm-block-rbd ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm-block-ssh ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm-common ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-kvm-core ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | qemu-system Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-arm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-arm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-arm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-common Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-common 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-common-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-data Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-data 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-data-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-gui Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-gui 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-gui-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-mips Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-mips 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-mips-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-misc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-misc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-misc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-ppc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-ppc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-ppc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-s390x Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-s390x 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-s390x-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-sparc Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-sparc 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-sparc-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-x86 Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-x86-microvm Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86-microvm 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-microvm-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-system-x86-xen Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-system-x86-xen 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-system-x86-xen-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-user Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-user-binfmt Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user-binfmt 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-binfmt-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-user-static Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-user-static 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-user-static-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-utils Ubuntu 20.04 LTS (focal) | 1:4.2-3ubuntu6.28 | [qemu-utils 1:4.2-3ubuntu6.28](https://patchblox.com/security/data/fix/linux/ubuntu-focal-qemu-utils-1-4.2-3ubuntu6.28.md) | Nov 3, 2023 |
| Linux | qemu-virtiofsd ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | ruby-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | ruby-libguestfs ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | seabios ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | seabios-bin ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | seavgabios-bin ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | sgabios ol 8 | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | sgabios-bin ol 8 | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | supermin ol 8 | 0:5.2.1-1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | supermin-devel ol 8 | 0:5.2.1-1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | swtpm ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | swtpm-devel ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | swtpm-libs ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | swtpm-tools ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | swtpm-tools-pkcs11 ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | virt-dib ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | virt-v2v ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | virt-v2v-bash-completion ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | virt-v2v-man-pages-ja ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |
| Linux | virt-v2v-man-pages-uk ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | [ELSA-2024-12605](https://patchblox.com/security/data/fix/linux/elsa-2024-12605.md) | Sep 2, 2024 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.