Yogita Urade e50d61d7df qemu: fix CVE-2023-3019 ...

A DMA reentrancy issue leading to a use-after-free error
was found in the e1000e NIC emulation code in QEMU. This
issue could allow a privileged guest user to crash the
QEMU process on the host, resulting in a denial of service.

CVE-2023-3019-0002 is the CVE fix and CVE-2023-3019-0001
is dependent CVE fix.

fix indent issue in qemu.inc file.

CVE-2023-3019 patch required Mem ReenttranceyGuard structure
definition, it's defined in commit:
a2e1753b80
but the patch is causing errors:
Failed: qemux86 does not shutdown within timeout(120)
so backported only required structure definition.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-3019

Upstream patches:
7d0fefdf81
3c0463a650

(From OE-Core rev: 3782e1b21882ffc5e4cc466418e066179470241e)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2024-11-02 06:32:36 -07:00

..

classes

populate_sdk_base: inherit nopackages

2024-10-07 05:43:22 -07:00

conf

gcc: upgrade to v11.5

2024-10-07 05:43:22 -07:00

files

common-licenses: Backport missing license

2024-04-05 07:23:59 -07:00

lib

selftest/runtime_test/virgl: Disable for all fedora

2024-10-12 05:17:58 -07:00

recipes-bsp

grub: fs/fat: Don't error when mtime is 0

2024-09-04 05:57:57 -07:00

recipes-connectivity

openssl: patch CVE-2024-9143

2024-11-02 06:32:36 -07:00

recipes-core

build-appliance-image: Update to kirkstone head revision

2024-10-12 05:23:21 -07:00

recipes-devtools

qemu: fix CVE-2023-3019

2024-11-02 06:32:36 -07:00

recipes-example/rust-hello-world

rustfmt: remove the recipe

2021-12-08 20:22:11 +00:00

recipes-extended

ghostscript: Backport CVE-2024-29508

2024-11-02 06:32:36 -07:00

recipes-gnome

gcr: Fix LICENSE

2024-09-16 06:09:56 -07:00

recipes-graphics

kmscube: create_framebuffer: backport modifier fix

2024-10-24 06:31:58 -07:00

recipes-kernel

linux-firmware: upgrade 20240220 -> 20240909

2024-10-24 06:31:58 -07:00

recipes-multimedia

tiff: Fix LICENSE

2024-09-16 06:09:56 -07:00

recipes-rt

meta/recipes: python 3.12 regex

2024-03-01 05:19:54 -10:00

recipes-sato

webkitgtk: Security fix CVE-2024-40779

2024-09-27 05:57:34 -07:00

recipes-support

curl: free old conn better on reuse

2024-10-07 05:43:22 -07:00

site

ppc/siteinfo: Fix differences between musl and glibc

2022-03-15 08:40:09 +00:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00