13307 matches found
OPENSUSE-SU-2026:20567-1 Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.9. Security issues fixed: - CVE-2026-3196: unbounded memory allocation and host denial-of-service via PCMINFO requests sent from the guest bsc1259079. - CVE-2026-3195: heap out-of-bounds write when reading input audio in the...
OESA-2026-1991 qemu security update
QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation...
OESA-2026-1989 qemu security update
QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation...
CVE-2024-8354 affecting package qemu for versions less than 9.1.0-3
CVE-2024-8354 affecting package qemu for versions less than 9.1.0-3. A patched version of the package is available...
CVE-2025-14876 affecting package qemu for versions less than 9.1.0-3
CVE-2025-14876 affecting package qemu for versions less than 9.1.0-3. A patched version of the package is available...
CVE-2024-8354 affecting package qemu for versions less than 6.2.0-27
CVE-2024-8354 affecting package qemu for versions less than 6.2.0-27. A patched version of the package is available...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : QEMU vulnerabilities (USN-8161-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8161-1 advisory. It was discovered that the LSI53C895A SCSI Host Bus Adapter implementation of QEMU incorrectly handled memory. An attacker inside the...
Linux Distros Unpatched Vulnerability : CVE-2026-34177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden lxd/project/limits/permissions.go, which omits raw.apparmo...
SUSE CVE-2026-34177
Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden lxd/project/limits/permissions.go, which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote...
EUVD-2026-20872
LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf...
LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf
Summary The isVMLowLevelOptionForbidden function in lxd/project/limits/permissions.go is missing raw.apparmor and raw.qemu.conf from its hardcoded forbidden list. A user with canedit permission on a VM instance in a restricted project can combine these two omissions to bridge the LXD unix socket...
GHSA-FM2X-C5QW-4H6F LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf
Summary The isVMLowLevelOptionForbidden function in lxd/project/limits/permissions.go is missing raw.apparmor and raw.qemu.conf from its hardcoded forbidden list. A user with canedit permission on a VM instance in a restricted project can combine these two omissions to bridge the LXD unix socket...
GHSA-W53M-3RV6-Q4V9 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-aws, linux-gcp...
GHSA-PW2V-CMFH-X2P3 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-aws, linux-gcp...
GHSA-R8HG-WQ4J-QXMG vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-aws, linux-gcp...
GHSA-WGQX-9HCF-WPVQ vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-aws, linux-gcp...
GHSA-WGXF-R68R-7W9H vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-aws, linux-gcp...
GHSA-RX25-RPPP-X99W vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-qemu, linux-aws, linux-gcp...