| Reported on: | 20251105 |
|---|---|
| Published on: | 20251113 |
| Fixed on: | 20251113 |
| Reported by: | Sylvain Beucler |
|---|---|
| Patched by: | Peter Krempa |
External inactive snapshots are created by invoking 'qemu-img' which creates the file. Currently qemu-img creates image with mode 644 based on default umask as libvirt doesn't set any.
Newly created disk images are world-readable. Malicious user on the host can read newly written data in the VM.
Don't create snapshots while the VM is inactive or fix the permissions after creating the snapshot.