CVE-2026-50079

A Time-of-check Time-of-use (TOCTOU) Race Condition exists in the virtio network virtual device within the QNX Virtual Machine (QVM) . This vulnerability affects QNX Hypervisor and QNX Hypervisor for Safety . An attacker operating within the guest environment could manipulate the virtual network ...

CVE-2026-63028

A vulnerability exists in the MigTD virtio-vsock stream handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0. The root cause is improper initialization , which may allow a system software adversary with unauthenticated local access to perform a denial of service or cause dat...

EUVD-2026-121703

Improper initialization in the MigTD virtio-vsock stream handling for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a low complexity attack may enable data corruption. This...

EUVD-2026-121699

Expired pointer dereference in the MigTD's virtio-vsock implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. System software adversary with a privileged user combined with a low complexity attack...

CVE-2026-62929

A vulnerability exists in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) operating within Ring 0 . The root cause is an expired pointer dereference , which may allow a system software adversary with privileged user access to perform a low-complexity at...

EUVD-2026-121691

Use after free in the MigTD virtio driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially...

CVE-2026-61467

A use after free vulnerability exists in the MigTD virtio driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0 . A privileged system software adversary can exploit this with low complexity to cause data corruption , with a potential for escalation of privilege . The flaw is re...

CVE-2026-60138

A vulnerability exists in the virtio-vsock implementation of the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor. The root cause is a use of out-of-range pointer offset (CWE-823). A system software adversary with privileged user access can perform a low complexity attack to ...

EUVD-2026-121685

Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalatio...

CVE-2026-60020

A memory leak vulnerability exists in the MigTD virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0 . The root cause is a missing release of memory after effective lifetime (CWE-401). A system software adversary with privileged user access can perform a low-comp...

EUVD-2026-121681

Missing release of memory after effective lifetime in the MigTD virtio-serial driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of...

CVE-2026-59771

The Intel(R) TDX Migration Trust Domain (MigTD) is vulnerable to a denial of service (DoS) due to improper validation of an array index in the virtio-serial driver operating within Ring 0: Hypervisor. A system software adversary with privileged user rights could exploit this via a low-complexity ...

EUVD-2026-121680

Improper validation of array index in the MigTD's virtio-serial driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This...

virtio-win bug fix and enhancement update

An update is available for virtio-win. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receivebig receivebig bounds the device-announced length by bigpacketsnumskbfrags + 1 PAGESIZE. This is still too loose: addrecvbufbig sets sg1 to start at offset sizeofstruct paddedvnethdr into the...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 “vsock/virtio: stop workers during the .remove” made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

virtio-win update

An update is available for virtio-win. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...

GO-2026-6912 KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt

KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt...

virtio-win bug fix and enhancement update

An update is available for virtio-win. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...