virtio-win bug fix and enhancement update

An update is available for virtio-win. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...

CVE-2026-46655

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...

CVE-2026-46655

The Viosock driver (viosock.sys) in virtio-win (versions mm210 through mm319) is vulnerable to a local privilege escalation in Windows guests running QEMU or KVM. A low-privilege process can submit an IOCTL_SELECT request with crafted VIRTIO_VSOCK_SELECT.Fdss[*].fd_count values that cause an inte...

CVE-2026-46655 virtio-win: Integer overflow causing a heap overflow in Viosock driver

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...

EUVD-2026-83179

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...

CVE-2026-46655 virtio-win: Integer overflow causing a heap overflow in Viosock driver

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...

CVE-2026-46655: Heap-based Buffer Overflow

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...

Important: Red Hat Bug Fix Advisory: virtio-win bug fix and enhancement update

An update for virtio-win is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware drivers used by fully virtualized gues...

Important: Red Hat Bug Fix Advisory: virtio-win bug fix and enhancement update

An update for virtio-win is now available for Red Hat Enterprise Linux 10. The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware drivers used by fully virtualized guests running on Red Hat...