QEMU HMP: incomplete permissions checks for gpa2hpa/gpa2hva/i commands

Details

The gpa2hpa/gpa2hva/i of QEMU's HMP interface were only requiring Sys.Modify privileges, instead of being restricted to root. These commands potentially allow leaking information about the memory layout of the QEMU process, or read memory from I/O ports, which might have security implications.

This issue was privately reported by Martin Vlach <[email protected]> / <[email protected]>.

Fixed in

• qemu-server >= 9.2.11