The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvmUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-commonUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-coreUpgrade qemu-guest-agentUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-imgUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpu-ccw | Aug 2, 2026 | Jul 14, 2026 |
| Amazon Linux Ami 2 | — | Upgrade qemu-audio-sdlUpgrade qemu-user-binfmtUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemu-user-staticUpgrade qemuUpgrade qemu-block-dmgUpgrade qemu-block-nfsUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-commonUpgrade qemu-audio-ossUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu-debuginfoUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-guest-agentUpgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade ivshmem-toolsUpgrade qemu-userUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-ui-curses | Jul 8, 2026 | Jul 8, 2026 |
| Debian | — | Upgrade qemu | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-rbdUpgrade qemu-kvmUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-guest-agentUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-blkioUpgrade qemu-imgUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-docsUpgrade qemu-kvm-core | Oct 22, 2026 | Jun 12, 2026 |
| Redhat_linux | — | Upgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-curlNo solution existsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvmUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-coreUpgrade qemu-kvm-docsUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-imgUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw | Jul 16, 2026 | May 26, 2026 |
| Rocky_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-guest-agent-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-imgUpgrade qemu-kvm-debugsourceUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-blkio-debuginfo | Jul 17, 2026 | Jul 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub