Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: removed the spurious WARN message when writing to ZCREL2. It is entirely possible for a guest to write to the ZCREL2 sysreg alias while in a nested context. This is expected if FEATNV2 is advertised to the L1...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Rejects adapter interrupt forwarding if it is already enabled. The MPCIFC instruction does not allow registering adapter interrupts without first unregistering them. Therefore, any request to enable interrupt...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fixed a unlikely race condition in trygetlockedpte A unlikely race condition occurred in the trygetlockedpte function. This could happen if the puds or pmds are unmapped between the p?dpget and p?doffset functions...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if the guest VNCR is not normal memory When constructing a L1 VNCR mapping, KVM unconditionally uses cacheable memory attributes, even if the underlying PFN is not memory. This can become particularly...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvmvcpuioctlinterrupt The function kvmvcpuioctlinterrupt can be called from userspace. Here, checking of irq validity is added within kvmvcpuioctlinterrupt...

RHSA-2026:58571 Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Bulletin has no description...

CVE-2026-74607

A flaw was found in the Kernel-based Virtual Machine KVM Secure Virtual Machine SVM module within the Linux kernel. This vulnerability involves a race condition during the management of encrypted virtual machine contexts, specifically when handling owner and mirror lists. A privileged user or...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 10 : qemu-kvm (RHSA-2026:58571)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58571 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

qemu-kvm security, bug fix, and enhancement update

10.1.0-16.el102.5 - kvm-file-posix-populate-pwritezeroesalignment.patch RHEL-207389 - kvm-block-use-pwritezeroesalignment-when-writing-first.patch RHEL-207389 - kvm-iotests-add-Linux-loop-device-image-creation-test.patch RHEL-207389 - Resolves: RHEL-207389 qemu-img create/convert fails on target...

Oracle Linux 10 : qemu-kvm (ELSA-2026-58571)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58571 advisory. 10.1.0-16.el102.5 - kvm-file-posix-populate-pwritezeroesalignment.patch RHEL-207389 - kvm-block-use-pwritezeroesalignment-when-writing-first.patch RHEL-207389...

ALSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...

Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of kvmlap...

Oracle Linux 9 : qemu-kvm (ELSA-2026-500220)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500220 advisory. - tests/9p: add 3 xattr FID limit test cases local fs driver Christian Schoenebeck Orabug: 39636027 CVE-2026-8348 - tests/9p: add 3 xattr FID limit...

RHEL 8 : kernel (RHSA-2026:59091)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59091 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1...

RockyLinux 10 : qemu-kvm (RLSA-2026:58571)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58571 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Bug Fixes and Enhancements: qemu-kvm hung during drain after double pause...

AZL-97085 CVE-2026-74607 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...

CVE-2026-74607

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...

UBUNTU-CVE-2026-74607

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...

CVE-2026-74607

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...