CVE-2026-53210 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-gcp, linux-vmware, linux-azure, linux-qemu...

CVE-2026-53214 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-gcp, linux-vmware, linux-azure, linux-qemu...

CVE-2026-53218 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-gcp, linux-vmware, linux-azure, linux-qemu...

CVE-2026-53221 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-gcp, linux-vmware, linux-azure, linux-qemu...

GHSA-37PV-M98R-VGM8 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-gcp, linux-vmware, linux-azure, linux-qemu...

GHSA-4V48-C98Q-4VPC vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-gcp, linux-vmware, linux-azure, linux-qemu...

GHSA-8CG3-6H68-W2CJ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-gcp, linux-vmware, linux-azure, linux-qemu...

Amazon Linux 2 : qemu, --advisory ALAS2-2026-3793 (ALAS-2026-3793)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3793 advisory. A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input...

Medium: qemu

Issue Overview: A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request...

OPENSUSE-SU-2026:21253-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver bsc1268061. - CVE-2026-48914: heap buffer overflow d...

SUSE-SU-2026:22550-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver bsc1268061. - CVE-2026-48914: heap buffer overflow d...

SUSE-SU-2026:22576-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver bsc1268061. - CVE-2026-48914: heap buffer overflow d...

PYSEC-2026-871 OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

The image parser in OpenStack Cinder prior to 7.0.2, and 8.0.0 and above, prior to 9.0.0; Glance prior to 14.00; and Nova prior to 12.0.4 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service memory and disk consumption via a crafted disk image. This iss...

OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

The image parser in OpenStack Cinder prior to 7.0.2, and 8.0.0 and above, prior to 9.0.0; Glance prior to 14.00; and Nova prior to 12.0.4 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service memory and disk consumption via a crafted disk image. This iss...

CVE-2026-48914 affecting package qemu for versions less than 9.1.0-8

CVE-2026-48914 affecting package qemu for versions less than 9.1.0-8. A patched version of the package is available...

CVE-2026-3195 affecting package qemu for versions less than 9.1.0-8

CVE-2026-3195 affecting package qemu for versions less than 9.1.0-8. A patched version of the package is available...

UBUNTU-CVE-2026-53325

In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agpamd64probe A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment e.g. qemu/kvm without a physical AMD northbridge. The crash occurs...

USN-8412-3: QEMU regression

USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for CVE-2024-4467 was incomplete and prevented the creation of boot volumes from qcow2 images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Felipe Franciosi, Raphael Norwitz, and...

USN-8412-3 qemu regression

USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for CVE-2024-4467 was incomplete and prevented the creation of boot volumes from qcow2 images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Felipe Franciosi, Raphael Norwitz, and...

Linux Distros Unpatched Vulnerability : CVE-2026-8343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - ui: fix validation of VNC extended clipboard data length CVE-2026-8343 Note that Nessus relies on the presence of the...