13361 matches found
CVE-2026-23092
CVE-2026-23092 relates to a Linux kernel fix in iio: dac: ad3552r-hs_write_data_source where out-of-bounds writes could occur. The issue stemmed from using the write-return count as the index for null termination instead of the actual number of bytes copied by simple_write_to_buffer(). If count e...
Security update for libvirt
This update for libvirt fixes the following issues: Security fixes: CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML bsc1253278 Other fixes: libvirt-supportconfig: Add support for...
Oracle Linux 10 : qemu-kvm (ELSA-2026-1831)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-1831 advisory. - Resolves: RHEL-120118 CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free rhel-10.1.z Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-23086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peerbufalloc, which is set from the remote endpoint's...
melange QEMU runner could write files outside workspace directory
An attacker who can influence the tar stream from a QEMU guest VM could write files outside the intended workspace directory on the host. The retrieveWorkspace function extracts tar entries without validating that paths stay within the workspace, allowing Path Traversal via ../ sequences...
ALSA-2026:1831 Moderate: qemu-kvm security update
Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-11234 For more...
PT-2026-6211
Name of the Vulnerable Software and Affected Versions melange versions 0.11.3 through 0.40.2 Description melange is a tool that allows users to build apk packages using declarative pipelines. A security issue exists where an attacker who can influence the tar stream from a QEMU guest VM could wri...
GHSA-3299-Q63P-824W vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-23131 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-39822 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-5XMF-424G-JJHG vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-VF7H-45FW-J88P vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-22116 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-40325 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-WHXM-HH66-2GFX vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2026-1195)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2026-1144)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for qemu
This update for qemu fixes the following issues: CVE-2025-11234: Fixed use-after-free in websocket handshake code can lead to denial of service bsc1250984. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:0356-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2025-11234: Fixed use-after-free in websocket handshake code can lead to denial of service bsc1250984...
EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2026-1144)
According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueuepush as set in...