CVE-2026-53229 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-2WQP-VX6W-RVFX vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-397C-7VFX-VG4X vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-4463-XXF2-768J vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-62M5-M548-5V5F vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-69HJ-PHJM-G9C3 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-8CG3-6H68-W2CJ vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-8VC2-H54Q-6258 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-G27R-592C-R436 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-J962-FX34-5263 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-MP79-8QQ6-QP9G vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-PW9R-H2M6-6VVG vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-R56G-VPX5-3639 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

GHSA-WWC5-7R8X-52GG vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-gcp, linux-qemu, linux-vmware, linux-aws...

Medium: qemu

Issue Overview: A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request...

Amazon Linux 2 : qemu, --advisory ALAS2-2026-3793 (ALAS-2026-3793)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3793 advisory. A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input...

OPENSUSE-SU-2026:21253-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver bsc1268061. - CVE-2026-48914: heap buffer overflow d...

SUSE-SU-2026:22576-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver bsc1268061. - CVE-2026-48914: heap buffer overflow d...

SUSE-SU-2026:22550-1 Security update for qemu

This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver bsc1268061. - CVE-2026-48914: heap buffer overflow d...

OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

The image parser in OpenStack Cinder prior to 7.0.2, and 8.0.0 and above, prior to 9.0.0; Glance prior to 14.00; and Nova prior to 12.0.4 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service memory and disk consumption via a crafted disk image. This iss...