GHSA-QHPR-79XW-32M8 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-aws, linux-vmware, linux-qemu-melange...

GHSA-GVRM-XH5G-W8V6 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-aws, linux-vmware, linux-qemu-melange...

GHSA-CM56-MVX6-66QM vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-aws, linux-vmware, linux-qemu-melange...

EUVD-2026-38043

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730...

GHSA-P5VH-P63C-CG4V vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-vmware, linux-aws...

CVE-2026-23138 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-vmware, linux-aws...

GO-2026-4407 melange QEMU runner could write files outside workspace directory in chainguard.dev/melange

melange QEMU runner could write files outside workspace directory in chainguard.dev/melange...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2022-3808:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3808:01 advisory. QEMU: QXL: integer overflow in cursoralloc can lead to heap buffer overflow CVE-2021-4206 QEMU: QXL: double fetch in qxlcursor can lead to heap buff...

Qemu-kvm: vnc websocket handshake use-after-free

...

EUVD-2017-11791

Malware in sbrugna...

EUVD-2017-16494

Malware in sbrugna...

EUVD-2017-9183

Malware in sbrugna...

EUVD-2017-15026

Malware in sbrugna...

EUVD-2017-11794

Malware in sbrugna...

Branch Predictor Isolation in KVM-QEMU

Summary Researchers claim new KVM-QEMU primitives allow exploitation of Spectre V2 resulting in information leakage in various cloud scenarios. KVM-QEMU is a combination of KVM Kernel-based Virtual Machine, a Linux kernel module that enables hardware-assisted virtualization and Quick Emulator QEM...

Linux Distros Unpatched Vulnerability : CVE-2016-8576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xhciringfetch function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and...

Linux Distros Unpatched Vulnerability : CVE-2016-9907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector i...

Linux Distros Unpatched Vulnerability : CVE-2017-18043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the macro ROUNDUP n, d in Quick Emulator Qemu allows a user to cause a denial of service Qemu process crash. CVE-2017-18043 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2016-7994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the virtiogpuresourcecreate2d function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a deni...

Linux Distros Unpatched Vulnerability : CVE-2015-8818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest use...