CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

UBUNTU-CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

QEMU security vulnerabilities

QEMU Quick Emulator is a suite of simulation processor software by Fabrice Bellard, an individual developer in France. The software is fast and cross-platform. A security vulnerability exists in QEMU 10.0.3 and earlier versions, which stems from inconsistent migration states...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

PT-2025-36294

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc5-mm-new-damon+ 93 Description The Linux kernel contains a flaw in mm/damon/ops-common.c where the damon migrate pages function attempts page migration even if the target node is invalid. This can occur...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a vCPU creation contention condition during SEV migration that could lead to a crash...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566

Astra Linux advisory describes a QEMU vulnerability affecting versions 7.1.0 through 8.2.1 where register_vfs mishandles the NumVFs vs TotalVFs, causing a buffer overflow in VF implementations. This is related to CVE-2024-26327. The connected document provides the concrete root cause and affected...

CVE-2025-54566: External Control of Critical State Data

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

PT-2025-37213

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists between smaps hugetlb range and page migration within the kernel’s memory management subsystem. Specifically, smaps hugetlb range accesses page table entries pt...

SUSE-SU-2025:02478-1 Security update 5.0.5 for Multi-Linux Manager Server

This update fixes the following issues: server-attestation-image: - Version 5.0.11: Fixed the health check of the container bsc1240604 server-hub-xmlrpc-api-image: - Version 5.0.13: Image rebuilt to the newest version with updated dependencies server-image: - Version 5.0.16: Fixed...

PT-2025-54869

This update fixes the following issues: server-attestation-image: - Version 5.0.11: Fixed the health check of the container bsc1240604 server-hub-xmlrpc-api-image: - Version 5.0.13: Image rebuilt to the newest version with updated dependencies server-image: - Version 5.0.16: Fixed...

WordPress FG Drupal to WordPress Cross-Site Request Forgery Vulnerability

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...

kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address access, as illustrated below. To prevent...

Virtuozzo Hybrid Infrastructure 7.0 Hotfix 2 (7.0.0-253)

This update provides a stability fix. Vulnerability id: VSTOR-110793 A stability fix for VM live migration...

RUSTSEC-2025-0172 `zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead

The zip-extract crate has been explicitly deprecated by its author on Jul 16, 2025, and the repository was archived on Sep 8, 2025. The author added deprecation notices README stating that the functionality is now available directly in the zip crate via ZipArchive::extract available since zip 0.6...

WordPress plugin FG Drupal to WordPress: code-related vulnerabilities

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...