OPENSUSE-SU-2026:12286-1 google-guest-agent-20261022.00-1.1 on GA media

These are all security issues fixed in the google-guest-agent-20261022.00-1.1 package on the GA media of openSUSE Tumbleweed...

Amazon Linux 2023 : qemu, qemu-common, qemu-guest-agent (ALAS2023-2026-3241)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3241 advisory. hw/usb/hcd-xhci: Set reentrancy guard in timer functions CVE-2026-17588 NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/1f24066fc88d33455ee54a20f29994d9e69997ba v11.1.0-rc3NOTE:...

Rocky Linux 9 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc (crlsa-2026_88421)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202688421 advisory. qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized- keys CVE-2026-12080 Bug Fixes and Enhancements: qemu-img can...

RLSA-2026:88421 Important: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack i...

qemu-kvm security, bug fix, and enhancement update

An update is available for qemu-kvm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linux...

OPENSUSE-SU-2026:12240-1 google-guest-agent-20261015.00-1.1 on GA media

These are all security issues fixed in the google-guest-agent-20261015.00-1.1 package on the GA media of openSUSE Tumbleweed...

QEMU Guest Agent Authorized Keys Symlink Privilege Escalation

QEMU Guest Agent contains a local privilege escalation vulnerability in its guest-ssh-add-authorized-keys handler. An unprivileged guest user can pre-stage symbolic links that cause root-run path-based ownership changes when an operator adds an SSH key...

PT-2026-122909

These are all security issues fixed in the google-guest-agent-20261015.00-1.1 package on the GA media of openSUSE Tumbleweed...

RockyLinux 9 : qemu-kvm (RLSA-2026:88421)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:88421 advisory. qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized- keys CVE-2026-12080 Bug Fixes and Enhancements: qemu-img...

qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

Important: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 9 : qemu-kvm (RHSA-2026:88421)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:88421 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

Astra Linux – vulnerability in libvirt

In libvirt versions prior to 6.0.0, qemu/qemudriver.c mishandles the handling of monitor jobs when querying a guest agent; this enables attackers to trigger a denial of service by blocking API calls...

Ubuntu 22.04 LTS : Google Guest Agent, Google OS Config Agent vulnerability (USN-8914-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8914-1 advisory. It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that...

USN-8914-1 google-guest-agent, google-osconfig-agent vulnerability

It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass...

USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability

It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass...

EulerOS 2.0 SP15 : qemu (EulerOS-SA-2026-4013)

According to the versions of the qemu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command...

EulerOS 2.0 SP15 : qemu (EulerOS-SA-2026-3947)

According to the versions of the qemu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command...

Rocky Linux 9.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0975)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260975 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2023-3019, CVE-2023-42467, CVE-2023-5088,...

Rocky Linux 9.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0489)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260489 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 9.2. It addresses 31 CVEs: CVE-2020-14364, CVE-2019-11091, CVE-2021-20221,...