REDHAT-BUG-1958935: Low severity Qemu vhost-user-gpu vulnerability
Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime. For more information, please refer to the upstream patchset below.
Patch series: https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04536.html
Memory leak in vgresourcecreate2d() in vhost-user-gpu.c : https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04541.html
Memory leak in vgresourceattachbacking() in vhost-user-gpu.c: https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04534.html
Memory leak in vgresourcedestroy() in vhost-user-gpu.c: https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04538.html
Memory leak in virglcmdresourceunref() in virgl.c: https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04540.html
Memory leak in virglresourceattachbacking() in virgl.c: https://lists.nongnu.org/archive/html/qemu-devel/2021-05/msg04537.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1958935?
The severity of REDHAT-BUG-1958935 is considered critical due to memory leaks that can lead to denial of service.
How do I fix REDHAT-BUG-1958935?
To fix REDHAT-BUG-1958935, you should update to the latest version of the QEMU vhost-user-gpu that addresses the memory leak.
What are the impacts of REDHAT-BUG-1958935?
The impacts of REDHAT-BUG-1958935 include increased memory consumption and potential service interruptions due to memory exhaustion.
Which software is affected by REDHAT-BUG-1958935?
The affected software includes the QEMU vhost-user-gpu component.
What causes REDHAT-BUG-1958935?
REDHAT-BUG-1958935 is caused by improper memory management and failure to release memory after its effective lifetime.