MiracleLinux 9 : qemu-kvm-10.1.0-17.el9_8.4.ML.1 (AXSA:2026-1505:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1505:04 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Tenable has extracted the preceding description block directly from the...

GHSA-JXR7-X2HM-5G42 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

GHSA-F4WG-8884-3QG5 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

CVE-2026-53399 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

CVE-2026-53402 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

AlmaLinux 9 : qemu-kvm (ALSA-2026:39311)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39311 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Tenable has extracted the preceding description block directly from the AlmaLinu...

CVE-2026-53027 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu-melange, linux-qemu...

GHSA-MCQQ-386F-GVF4 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu-melange, linux-qemu...

AZL-94302 CVE-2025-63913 affecting package qemu for versions less than 0.0.0-0

An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function 2 or the 'Find and configure a matching counter' function of SBI PMU extension...

Linux Distros Unpatched Vulnerability : CVE-2026-15578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a...

OESA-2026-3102 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code ...

OESA-2026-3101 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code ...

libvirt security update

11.10.0-12.4.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.4.el102 - cpuconf: Introduce virCPUDefSortFeatures RHEL-180449 - qemucapabilities: Split virQEMUCapsFillDomainCPUCaps RHEL-180449 - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel...

edk2 security update

20251114-5.0.1.el102.2 - Replace upstream references Orabug:36569119 20251114-5.el102.2 - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch RHEL-182421 - edk2-Bumped-to-OpenSSL-3.5.5-3.patch RHEL-165699 - Resolves: RHEL-182421 edk2/x64: re-enable legacy kernel loader rhel-10.2.z -...

CVE-2026-52975 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

GHSA-24F9-69R4-VR33 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-vmware, linux-gcp, linux-qemu...

CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

AZL-93006 CVE-2026-12080 affecting package qemu 9.1.0-11

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

DEBIAN-CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...