CVE-2021-20255 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-V9PM-V9P5-H96X vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-8354 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-V6W7-GQ3G-FWVM vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-3QX7-FF8P-6J2R vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6505 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-3QX7-FF8P-6J2R vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-8354 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6505 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6519 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2021-20255 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-V6W7-GQ3G-FWVM vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-XX3P-5M4J-RHW8 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-V9PM-V9P5-H96X vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2026-46606

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen...

CVE-2026-46606 Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen...

CVE-2026-52953

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers when kill QEMU process: Oops: general protection fault, probably for non-canonical address 0x7fffffff844eaaa7: 0000 1 SMP NOPTI Call Trace: dorawspinlock+0xaa/0x...

CVE-2026-52953

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers when kill QEMU process: Oops: general protection fault, probably for non-canonical address 0x7fffffff844eaaa7: 0000 1 SMP NOPTI Call Trace: dorawspinlock+0xaa/0x...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: x86/vmware: Fixed hypercall clobbering issues Fedora QA reported the following panic: BUG: Unable to handle a page fault for address: 0000000040003e54 PF: Supervisor write access in kernel mode PF: Errorcode0x0002 – Not-presen...

Astra Linux – Vulnerability in Qemu

An integer overflow vulnerability was discovered in the virtio-snd device through PCMINFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition...