RockyLinux 10 : qemu-kvm (RLSA-2026:58571)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58571 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Bug Fixes and Enhancements: qemu-kvm hung during drain after double pause...

The vulnerability of the QEMU hardware emulation software, related to the execution of operations beyond the buffer boundaries in memory, allows a malicious actor to trigger a system failure.

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability in the block/vmdk.c component of the QEMU hardware emulation software allows a hacker to cause a system failure.

The vulnerability of the block/vmdk.c component of the QEMU hardware emulation software is related to reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created VMDK image...

RHEL 10 : qemu-kvm (RHSA-2026:58571)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58571 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

GO-2026-6230 Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima...

SUSE CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

Amazon Linux 2 : qemu, --advisory ALAS2-2026-3866 (ALAS-2026-3866)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3866 advisory. In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, an...

PT-2026-80450

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima...

SUSE CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

Important: qemu

Issue Overview: In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a client's SetPixelFormat message. These fields are received as 16-bit values but are stored internally as uint8t. A malicious VNC...

CVE-2026-72005

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

SUSE CVE-2026-16033

A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths from escaping the instance templates directory specifically affecti...

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

Impact On an instance of Lima running with qemu driver, an arbitrary user in the VM could access /run/lima-guestagent.sock when the guest agent is enabled. This could result in running an arbitrary command with the root privileges in the VM not on the host, as lima-guestagent.sock provides the...

EUVD-2026-42933

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket...

GHSA-2J9V-P4XJ-CJW2 Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

Impact On an instance of Lima running with qemu driver, an arbitrary user in the VM could access /run/lima-guestagent.sock when the guest agent is enabled. This could result in running an arbitrary command with the root privileges in the VM not on the host, as lima-guestagent.sock provides the...

Linux Distros Unpatched Vulnerability : CVE-2026-50626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

PT-2026-80173

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: An unknown vulnerability exists in QEMU, with no detailed description available at this time.CVE-2026-15264 CVE-2026-16457 is a security vulnerability in QEMU. The specific details of thi...

PT-2026-80167

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: An unknown vulnerability exists in QEMU, with no detailed description available at this time.CVE-2026-15264 CVE-2026-16457 is a security vulnerability in QEMU. The specific details of thi...

...[ More ]

A proof of concept exploit for an out-of-bounds memory access vulnerability in the QEMU Hyper-V synthetic debugger device. The handlerecvmsg function fails to verify the length returned by cpuphysicalmemorymap before copying a received debug datagram into the mapped region. A guest able to invoke...

Linux Distros Unpatched Vulnerability : CVE-2026-63318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - QEMU 9pfs Readonly OTRUNC/OAPPEND Bypass via 9P2000.u Flag Mismatch CVE-2026-63318 Note that Nessus relies on the...