Qemu-kvm: information leak in virtio devices

🗓️ 04 Sep 2025 12:21:33Reported by MicrosoftType

Qemu virtual machine information leak in virtio devices reported by Microsoft.

Reporter	Title	Published	Views	Family All 68
AstraLinux	Astra Linux – Vulnerability in Qemu	13 Jan 202614:01	–	astralinux
BDU FSTEC	QEMU virtqueue_push() Disclosure	2 Jun 202500:00	–	bdu_fstec
CBLMariner	CVE-2024-8612 affecting package qemu for versions less than 9.1.0-1	11 Feb 202615:01	–	cbl_mariner
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_1486)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.6 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_1484)	1 Oct 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2026-1144)	31 Jan 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2026-1195)	31 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 9 : qemu-kvm (ELSA-2026-500220)	24 Aug 202600:00	–	nessus
Tenable Nessus	Oracle Linux 8 : virt:kvm_utils3 (ELSA-2026-50337)	24 Jun 202600:00	–	nessus
Tenable Nessus	QEMU 7.2.x < 7.2.15, 8.0.x < 8.0.6, 8.1.x < 8.1.6, 8.2.x < 8.2.8, 9.0.x < 9.0.4, 9.1.x < 9.1.1 Information Leak	27 Sep 202400:00	–	nessus