The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade virt-v2vUpgrade nbdkitUpgrade netcfUpgrade swtpm-toolsUpgrade virt-v2v-man-pages-ukUpgrade qemu-kvm-block-curlUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-mpathUpgrade supermin-develUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secretUpgrade virt-v2v-bash-completionUpgrade libvirt-wiresharkUpgrade superminUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-commonUpgrade libguestfs-javadocUpgrade python3-libguestfsUpgrade nbdkit-nbd-pluginUpgrade libguestfs-rescueUpgrade qemu-guest-agentUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivex-develUpgrade libnbd-develUpgrade seabiosUpgrade libnbdUpgrade libguestfs-gfs2Upgrade libguestfs-man-pages-ukUpgrade libguestfs-tools-cUpgrade libguestfs-xfsUpgrade libtpmsUpgrade python3-hivexUpgrade libguestfs-bash-completionUpgrade nbdkit-vddk-pluginUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-iscsiUpgrade python3-libvirtUpgrade libvirt-clientUpgrade nbdfuseUpgrade libvirt-dbusUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-bash-completionUpgrade libvirt-libsUpgrade libguestfs-toolsUpgrade sgabiosUpgrade netcf-libsUpgrade seabios-binUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-develUpgrade libguestfs-java-develUpgrade libiscsi-utilsUpgrade libiscsi-develUpgrade swtpm-develUpgrade sgabios-binUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-kvmUpgrade nbdkit-gzip-pluginUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivexUpgrade qemu-kvm-block-sshUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-rbdUpgrade netcf-develUpgrade nbdkit-python-pluginUpgrade nbdkit-serverUpgrade nbdkit-gzip-filterUpgrade qemu-kvm-coreUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-config-nwfilterUpgrade seavgabios-binUpgrade ruby-hivexUpgrade swtpm-tools-pkcs11Upgrade swtpmUpgrade qemu-kvm-block-glusterUpgrade python3-libnbdUpgrade libguestfs-winsupportUpgrade libvirtUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-develUpgrade libvirt-lock-sanlockUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-javaUpgrade libguestfs-gobject-develUpgrade virt-dibUpgrade swtpm-libsUpgrade qemu-virtiofsdUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-nssUpgrade libguestfs-gobjectUpgrade libvirt-docsUpgrade libguestfs-inspect-iconsUpgrade nbdkit-basic-pluginsUpgrade libtpms-develUpgrade qemu-kvmUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsiUpgrade libguestfs-man-pages-jaUpgrade libguestfs-applianceUpgrade libguestfsUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libnbd-bash-completionUpgrade ruby-libguestfs | Oct 16, 2024 | Aug 3, 2023 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemuUpgrade qemu-system-x86-xenUpgrade qemu-system-xenUpgrade qemu-system-armUpgrade qemu-system-x86-microvmUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-s390x | Jan 9, 2024 | Aug 4, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub