Exploit for CVE-2025-38676

CVE-2025-38676 — Linux Kernel ≤ 6.17-rc2 AMD IOMMU stack buf...

Linux Distros Unpatched Vulnerability : CVE-2018-12892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an...

Linux Distros Unpatched Vulnerability : CVE-2020-7211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows. CVE-2020-7211 Note that Nessus relies on the presence of t...

Debian dsa-5983 : qemu-block-extra - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5983 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5983-1 [email protected]...

Debian: Security Advisory (DSA-5983-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5983-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5983-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 22, 2025 https://www.debian.org/security/faq -...

DSA-5983-1 qemu - security update

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2020-25085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QEMU 5.0.0 has a heap-based Buffer Overflow in flatviewreadcontinue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHCBLKSIZE case...

Linux Distros Unpatched Vulnerability : CVE-2021-3409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously...

Linux Distros Unpatched Vulnerability : CVE-2021-3392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsasfreerequest...

CVE-2023-4458 vulnerabilities

Vulnerabilities for packages: linux-qemu-rc...

GHSA-GQJR-4MGJ-G55G vulnerabilities

Vulnerabilities for packages: linux-qemu-rc...

qemu-10.0.3-1.1 on GA media (moderate)

qemu-10.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15437-1 Rating: moderate Cross-References: CVE-2025-54566 CVSS scores: CVE-2025-54566 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2025-54566 SUSE : 2 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N...

PT-2025-37194

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description VMScape is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor like QEMU. The vulnerability allows a malicious virtual machin...

OPENSUSE-SU-2025:15437-1 qemu-10.0.3-1.1 on GA media

These are all security issues fixed in the qemu-10.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2020-13791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space...

CVE-2025-8860

A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFIVARSREGBUFFERSIZE, the .write callback uefivarswrite is invoked. The function allocates a heap buffer without zeroing the memory, leaving the buffer filled with residual data from prior allocations. Wh...

Linux Distros Unpatched Vulnerability : CVE-2025-38256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: fix folio unpinning syzbot complains about an unmapping failure: 108.070381 T1...

Linux Distros Unpatched Vulnerability : CVE-2021-20181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a...

Linux Distros Unpatched Vulnerability : CVE-2020-15863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank...