PVE default config and CVE-2021-3409

[tincboy]

Is default config of proxmox vulnerable to CVE-2021-3409 ?

https://starlabs.sg/advisories/21-3409

 

[t.lamprecht]

No, the SDHCI interface is not exposed to any guest in any configuration Proxmox VE provides over the web-interface.

A admin could add it manually by setting the args property manually, but only root can do that, and setting manual args for untrusted VMs is something which should be avoided in general.
I do not think that SD card emulation is a use case in general, and especially for untrusted VMs under third-party control? Do you have it in use?

 

[tincboy]

No, the SDHCI interface is not exposed to any guest in any configuration Proxmox VE provides over the web-interface.

A admin could add it manually by setting the args property manually, but only root can do that, and setting manual args for untrusted VMs is something which should be avoided in general.
I do not think that SD card emulation is a use case in general, and especially for untrusted VMs under third-party control? Do you have it in use?

No we don't use args or SD card emulation for any of our VMs
Thanks for information