Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVMS390GETCMMABITS memory The kvms390getcmmabits function allocates its output buffer using vmalloc, which does not zero the returned pages. c values = vmallocargs-count; In the non-peek migration path,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if the guest VNCR is not normal memory When constructing a L1 VNCR mapping, KVM unconditionally uses cacheable memory attributes, even if the underlying PFN is not memory. This can become particularly...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Added radixtreepreload to gaccessshadowfault. The addition of radixtreepreload to gaccessshadowfault ensures forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvmvcpuioctlinterrupt The function kvmvcpuioctlinterrupt can be called from userspace. Here, checking of irq validity is added within kvmvcpuioctlinterrupt...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Rejects concurrent changes to the CPUID entry count The function KVMTDXINITVM is rejected if the user space modifies the cpuid.nent value between the initial read and the subsequent copy of the initialization data. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM uses a separate MSR bitmap to run L2. If AVIC is ful...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fixed a race condition between LPI release and re-registration Fixed a potential race condition where decrementing an LPI’s reference count and evicting that structure from the LPI xarray occur simultaneously. L...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fixed memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid, which increments the reference count of struct userstruct on every invocation. However, we do not decrement...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Currently, KVM maps the L1 VNCR into the host stage-1 by relying entirely on the permissions of the guest stage-1. At the same time, it is entirely possible that the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fixed a unlikely race condition in trygetlockedpte A unlikely race condition occurred in the trygetlockedpte function. This could happen if the puds or pmds are unmapped between the p?dpget and p?doffset functions...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: nVMX: Moving the consistency check between vTPR and TPR Threshold to “normal” checks Moving the off-by-default consistency check for vmcs12.tprthreshold versus the virtual APIC vTPR to the “normal” control checks is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: x86 – Nullify irqfd-producer if updating the IRTE for bypass fails If updating the IRTE for bypass fails, nullify irqfd-producer. Leaving a dangling pointer could lead to a “use-after-free” issue if irqfd is still accessible...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: nv: Translate VNCR again before injecting an abort. Vulnerabilities occur when KVM faults in the VNCR page with FOLLwrite whenever the guest aborts. This is similar to how a regular Stage-2 mapping is handled. It’s...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM – Validated the irqchip index in irqfd routing. Sashiko reported that the irqchip index was not validated for LoongArch. Validation must be added, and irqchip indices outside the range should be rejected, to preven...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: the “pKVM reclaim” mechanism against the VM’s mm. Protected guest faults cause a long-term allocation of resources to the VM’s mm. This process can be performed later through file release, where current-mm may not be...

RHSA-2026:58571 Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Bulletin has no description...

CVE-2026-74607

A flaw was found in the Kernel-based Virtual Machine KVM Secure Virtual Machine SVM module within the Linux kernel. This vulnerability involves a race condition during the management of encrypted virtual machine contexts, specifically when handling owner and mirror lists. A privileged user or...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

qemu-kvm security, bug fix, and enhancement update

10.1.0-16.el102.5 - kvm-file-posix-populate-pwritezeroesalignment.patch RHEL-207389 - kvm-block-use-pwritezeroesalignment-when-writing-first.patch RHEL-207389 - kvm-iotests-add-Linux-loop-device-image-creation-test.patch RHEL-207389 - Resolves: RHEL-207389 qemu-img create/convert fails on target...

ALSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...