CVE-2025-38132 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-aws, linux-vmware, linux-qemu...

GHSA-GQGV-QR8F-VWMQ vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-aws, linux-vmware, linux-qemu...

MiracleLinux 3 : kmod-kvm-84-8.AXS3 (AXSA:2010-131:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-131:01 advisory. This package provides the kvm kernel modules built for the Linux kernel. Security issues fixed with this release: CVE-2010-0297 Buffer overflow in th...

MiracleLinux 3 : xen-3.0.3-64.3.1AXS3 (AXSA:2008-443:02)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-443:02 advisory. This package contains the Xen tools and management daemons needed to run virtual machines. Information on how to use Xen can be found at the Xen...

MiracleLinux 4 : qemu-kvm-0.12.1.2-2.295.AXS4.2 (AXSA:2012-912:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-912:03 advisory. KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in QEMU. An assertion failure occurred in the usbepget function in hw/net/core.c when attempting to retrieve the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service...

Astra Linux – Vulnerability in Qemu

A stack-based buffer overflow was discovered in the QEMU e1000 network device. The code responsible for padding short frames was removed from individual network devices and moved to the net core code. The issue arises because the device’s receive code is still capable of processing a short frame ...

Linux Distros Unpatched Vulnerability : CVE-2026-0665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process...

MiracleLinux 9 : qemu-kvm-9.0.0-10.el9_5.3 (AXSA:2025-9924:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9924:02 advisory. QEMU: virtio-net: stack buffer overflow in virtionetflushtx CVE-2023-6693 qemu-kvm: net: assertion failure in updatesctpchecksum CVE-2024-3567 Tenab...

CVE-2019-20175

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

Security update for libvirt

This update for libvirt fixes the following issues: Security fixes: CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML bsc1253278 Other fixes: libvirt-supportconfig: Add support for...

SUSE-SU-2026:0080-1 Security update for libvirt

This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML bsc1253278 Other fixes: - libvirt-supportconfig: Add support...

Security update for libvirt

This update for libvirt fixes the following issues: Security fixes: CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML bsc1253278 Other fixes: libvirt-supportconfig: Add support for...

SUSE-SU-2026:0079-1 Security update for libvirt

This update for libvirt fixes the following issues: Security fixes: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML bsc1253278 Other fixes: - libvirt-supportconfig: Add support...

openSUSE 15: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc (SUSE-SU-2026:0068-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0068-1 advisory. - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 - CVE-2025-12748: Fixed Check ACLs before parsing t...

Security update for qemu

This update for qemu fixes the following issues: CVE-2024-6505: Fixed queue index out-of-bounds access in software RSS bsc1227397 CVE-2023-1544: Fixed out-of-bounds read in pvrdmaringnextelemread bsc1209554 Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2026:0070-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-6505: Fixed queue index out-of-bounds access in software RSS bsc1227397 - CVE-2023-1544: Fixed out-of-bounds read in pvrdmaringnextelemread bsc1209554...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 CVE-2025-12748: Fixed Check ACLs before parsing the whole domain XML bsc1253278 Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:0068-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots bsc1253703 - CVE-2025-12748: Fixed Check ACLs before parsing the whole domain XML bsc1253278...

SUSE SLES15: qemu / qemu-SLOF / qemu-accel-tcg-x86 / qemu-arm / qemu-audio-alsa / etc (SUSE-SU-2026:0043-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0043-1 advisory. Security issues fixed: - CVE-2023-1544: out-of-bounds read in VMWare's paravirtual RDMA device operations can be exploited through ...