15141 matches found
PYSEC-2026-871 OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
The image parser in OpenStack Cinder prior to 7.0.2, and 8.0.0 and above, prior to 9.0.0; Glance prior to 14.00; and Nova prior to 12.0.4 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service memory and disk consumption via a crafted disk image. This iss...
MiracleLinux 9 : qemu-kvm-10.1.0-17.el9.ML.1 (AXSA:2026-1134:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1134:02 advisory. qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-11234 Tenable has extracted the preceding description block directly from the MiracleLinux security...
CVE-2026-3195 affecting package qemu for versions less than 9.1.0-8
CVE-2026-3195 affecting package qemu for versions less than 9.1.0-8. A patched version of the package is available...
CVE-2026-48914 affecting package qemu for versions less than 9.1.0-8
CVE-2026-48914 affecting package qemu for versions less than 9.1.0-8. A patched version of the package is available...
Oracle Linux 9 : libvirt (ELSA-2026-18748)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18748 advisory. 11.10.0-12.3.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.3.el98 - cpuconf: Introduce virCPUDefSortFeatures RHEL-178822 -...
libvirt security update
11.10.0-12.3.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.3.el98 - cpuconf: Introduce virCPUDefSortFeatures RHEL-178822 - qemucapabilities: Split virQEMUCapsFillDomainCPUCaps RHEL-178822 - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel RHEL-1788...
UBUNTU-CVE-2026-53325
In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agpamd64probe A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment e.g. qemu/kvm without a physical AMD northbridge. The crash occurs...
CVE-2026-53325: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agpamd64probe A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment e.g. qemu/kvm without a physical AMD northbridge. The crash occurs...
USN-8412-3: QEMU regression
USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for CVE-2024-4467 was incomplete and prevented the creation of boot volumes from qcow2 images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Felipe Franciosi, Raphael Norwitz, and...
USN-8412-3 qemu regression
USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for CVE-2024-4467 was incomplete and prevented the creation of boot volumes from qcow2 images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Felipe Franciosi, Raphael Norwitz, and...
Linux Distros Unpatched Vulnerability : CVE-2026-48003
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a...
Linux Distros Unpatched Vulnerability : CVE-2026-48002
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a...
Linux Distros Unpatched Vulnerability : CVE-2026-8343
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - ui: fix validation of VNC extended clipboard data length CVE-2026-8343 Note that Nessus relies on the presence of the...
Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation
...
Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)
...
qemu:qemu-fuzz-i386-target-generic-fuzz-pc-i440fx: Heap-use-after-free in pci_enum
Detailed Report: https://oss-fuzz.com/testcase?key=4973773422657536 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-pc-i440fx Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x77ed802b28d0 Crash State:...
SUSE CVE-2026-13318
A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...
CVE-2026-52953
A flaw was found in the Linux kernel's input/output memory management unit IOMMU virtualized directed I/O VT-d subsystem. This vulnerability occurs due to an out-of-scope memory access when a QEMU process is terminated. An attacker could potentially trigger a general protection fault, leading to ...
PT-2026-53012
Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description Instance snapshots ignore the restricted.containers.lowlevel=block setting, which allows for arbitrary command execution on the Incus server. This occurs by abusing lowlevel hooks such as raw.l...
