OPENSUSE-SU-2025:15821-1 qemu-10.1.3-1.1 on GA media

These are all security issues fixed in the qemu-10.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-40265

No description is available for this CVE...

CVE-2022-50657

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: add missing memcpy in kasaninit Hi Atish, It seems that the panic is due to the missing memcpy during kasaninit. Could you please check whether this patch is helpful? When doing kasanpopulate, the new allocated...

DEBIAN-CVE-2025-40295

In the Linux kernel, the following vulnerability has been resolved: fscrypt: fix left shift underflow when inode-iblkbits PAGESHIFT When simulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, an error trace appears during partition table reading at boot...

UBUNTU-CVE-2025-40265

In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sbminblocksize return value checks When emulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, but without format, a kernel panic was triggered during the early boot stag...

CVE-2025-40265

CVE-2025-40265 affects the Linux kernel vfat filesystem code. A missing return-value check of sb_min_blocksize() could trigger a kernel panic during NVMe/qemu emulation when mounting a vfat filesystem with 8 KiB logical/physical block sizes and no format. The vulnerability is addressed by the ref...

EUVD-2025-201192

In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sbminblocksize return value checks When emulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, but without format, a kernel panic was triggered during the early boot stag...

CVE-2024-7409 affecting package qemu for versions less than 6.2.0-26

CVE-2024-7409 affecting package qemu for versions less than 6.2.0-26. A patched version of the package is available...

RLSA-2023:2757 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

openSUSE 16 Security Update : libvirt (openSUSE-SU-2025-20100-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20100-1 advisory. - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots bsc1253703 - CVE-2025-12748: Fixed Denial of service in XML parsi...

OESA-2025-2758 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in QEMU. An assertion failure was present in the usbepget function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious...

TencentOS Server 4: qemu (TSSA-2024:0934)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0934 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: virt and virt-devel (TSSA-2023:0118)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0118 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

CVE-2025-63749 affects pnetlab version 5.3.11. The vulnerability is a Command Injection via the qemu_options parameter in pnetlab, due to improper handling of that parameter. Impact is described as possible command execution with low to moderate severity (CVSS 3.1 base score 6.5, network attack v...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

PT-2025-47384

Name of the Vulnerable Software and Affected Versions pnetlab version 5.3.11 Description The software contains a flaw due to which an attacker could inject commands. This occurs through manipulation of the qemu options parameter. Recommendations At the moment, there is no information about a newe...

PNETLab 安全漏洞

PNETLab is a platform from PNETLab Inc. that allows labs to be downloaded and shared with the community. A security vulnerability exists in PNETLab version 5.3.11 that stems from the qemuoptions parameter being vulnerable to command injection attacks...