GHSA-CM56-MVX6-66QM vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange, linux-aws...

GHSA-GVRM-XH5G-W8V6 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange, linux-aws...

GHSA-QHPR-79XW-32M8 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange, linux-aws...

EUVD-2026-38043

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730...

GHSA-P5VH-P63C-CG4V vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

CVE-2026-23138 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

GO-2026-4407 melange QEMU runner could write files outside workspace directory in chainguard.dev/melange

melange QEMU runner could write files outside workspace directory in chainguard.dev/melange...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2022-3808:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3808:01 advisory. QEMU: QXL: integer overflow in cursoralloc can lead to heap buffer overflow CVE-2021-4206 QEMU: QXL: double fetch in qxlcursor can lead to heap buff...

Qemu-kvm: vnc websocket handshake use-after-free

...

EUVD-2017-11791

Malware in sbrugna...

EUVD-2017-9183

Malware in sbrugna...

EUVD-2017-15026

Malware in sbrugna...

EUVD-2017-11794

Malware in sbrugna...

EUVD-2017-16494

Malware in sbrugna...

Branch Predictor Isolation in KVM-QEMU

Summary Researchers claim new KVM-QEMU primitives allow exploitation of Spectre V2 resulting in information leakage in various cloud scenarios. KVM-QEMU is a combination of KVM Kernel-based Virtual Machine, a Linux kernel module that enables hardware-assisted virtualization and Quick Emulator QEM...

Linux Distros Unpatched Vulnerability : CVE-2016-9911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quick Emulator Qemu built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in...

Linux Distros Unpatched Vulnerability : CVE-2016-9907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector i...

Linux Distros Unpatched Vulnerability : CVE-2016-7994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the virtiogpuresourcecreate2d function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a deni...

Linux Distros Unpatched Vulnerability : CVE-2016-9923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quick Emulator Qemu built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in...

Linux Distros Unpatched Vulnerability : CVE-2017-15119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Network Block Device NBD server in Quick Emulator QEMU before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option...