PT-2026-20883

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw exists in QEMU where a specifically designed VMDK image can cause an out-of-bounds read. This could result in a leak of up to 12 bytes of sensitive information or a denial of service...

PT-2026-23849

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A heap buffer overflow condition exists in QEMU. This issue was automatically discovered and reported by an AI Agent three months prior to public disclosure. Recommendations At the moment, there...

PT-2026-28637

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when the cpu physical memory map function returns a shorter length than...

PT-2026-25095

Name of the Vulnerable Software and Affected Versions qemu affected versions not specified Description The description provides information about security issues that were resolved in the qemu-10.2.2-1.1 package on openSUSE Tumbleweed. The nature of these security issues is not detailed in the...

SUSE: Security Advisory (SUSE-SU-2025:4523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-oss / qemu-audio-pa / etc (SUSE-SU-2025:4523-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4523-1 advisory. - CVE-2023-1544: pvrdma: Fixed out-of-bounds read in pvrdmaringnextelemread bsc1209554 Tenable has extracted the preceding description block directly...

Security update for qemu

This update for qemu fixes the following issues: CVE-2023-1544: pvrdma: Fixed out-of-bounds read in pvrdmaringnextelemread bsc1209554 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...

SUSE-SU-2025:4523-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2023-1544: pvrdma: Fixed out-of-bounds read in pvrdmaringnextelemread bsc1209554...

EUVD-2022-55788

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: fix possible null-ptr-defer in sndmts64interrupt I got a null-ptr-defer error report when I do the following tests on the qemu platform: make defconfig and CONFIGPARPORT=m, CONFIGPARPORTPC=m, CONFIGSNDMTS64=m Then...

CVE-2022-50773 ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: fix possible null-ptr-defer in sndmts64interrupt I got a null-ptr-defer error report when I do the following tests on the qemu platform: make defconfig and CONFIGPARPORT=m, CONFIGPARPORTPC=m, CONFIGSNDMTS64=m Then...

openSUSE 16 Security Update : qemu (openSUSE-SU-2025:20171-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20171-1 advisory. Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be...

SUSE SLES16: qemu / qemu-SLOF / qemu-arm / qemu-audio-alsa / qemu-audio-dbus / etc (SUSE-SU-2025:21233-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:21233-1 advisory. Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device...

SUSE-SU-2026:20008-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host bsc1253002. - CVE-2025-11234: use-after-free in WebSocket...

CVE-2025-14876

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...

OPENSUSE-SU-2025:20171-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host bsc1253002. - CVE-2025-11234:...

SUSE-SU-2025:21233-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host bsc1253002. - CVE-2025-11234:...

SUSE-SU-2025:21230-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host bsc1253002. - CVE-2025-11234:...

RHSA-2025:23228 Red Hat Security Advisory: qemu-kvm security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: qemu-kvm security update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

qemu-kvm: VNC WebSocket handshake use-after-free

A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...