AlmaLinux 10 : qemu-kvm (ALSA-2026:58571)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58571 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Bug Fixes and Enhancements: qemu-kvm hung during drain after double pause...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

RLSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...

qemu-kvm security, bug fix, and enhancement update

An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Cancel the delayed EOI handling of the I/O APIC before destroying vCPUs. Cancel and flush the delayed EOI handling of the I/O APIC during the “pre-VM-destroy” phase, before vCPUs are destroyed. Processing the EOI...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: nv: Translate VNCR again before injecting an abort. Vulnerabilities occur when KVM faults in the VNCR page with FOLLwrite whenever the guest aborts. This is similar to how a regular Stage-2 mapping is handled. It’s...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. Proper migration requires that additional SNP-specific states, such as...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Added radixtreepreload to gaccessshadowfault. The addition of radixtreepreload to gaccessshadowfault ensures forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: s390: pci: Fixed a GISC reference count leak when enabling AIF. The kvms390giscregister function registers the guest ISC before pinning the guest interrupt forwarding pages and allocating the AISB bit. If any of the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: x86 – Nullify irqfd-producer if updating the IRTE for bypass fails If updating the IRTE for bypass fails, nullify irqfd-producer. Leaving a dangling pointer could lead to a “use-after-free” issue if irqfd is still accessible...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVMS390GETCMMABITS memory The kvms390getcmmabits function allocates its output buffer using vmalloc, which does not zero the returned pages. c values = vmallocargs-count; In the non-peek migration path,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Currently, KVM maps the L1 VNCR into the host stage-1 by relying entirely on the permissions of the guest stage-1. At the same time, it is entirely possible that the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: nVMX: Moving the consistency check between vTPR and TPR Threshold to “normal” checks Moving the off-by-default consistency check for vmcs12.tprthreshold versus the virtual APIC vTPR to the “normal” control checks is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Rejects concurrent changes to the CPUID entry count The function KVMTDXINITVM is rejected if the user space modifies the cpuid.nent value between the initial read and the subsequent copy of the initialization data. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM – Validated the irqchip index in irqfd routing. Sashiko reported that the irqchip index was not validated for LoongArch. Validation must be added, and irqchip indices outside the range should be rejected, to preven...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM uses a separate MSR bitmap to run L2. If AVIC is ful...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of the PAGEUNUSED page bit The PAGEUNUSED softbit should not actually exist. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved or swappe...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fixed a race condition between LPI release and re-registration Fixed a potential race condition where decrementing an LPI’s reference count and evicting that structure from the LPI xarray occur simultaneously. L...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: removed the spurious WARN message when writing to ZCREL2. It is entirely possible for a guest to write to the ZCREL2 sysreg alias while in a nested context. This is expected if FEATNV2 is advertised to the L1...