A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade qemu-virtiofsdUpgrade seabios-binUpgrade superminUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade sgabiosUpgrade hivexUpgrade libguestfs-inspect-iconsUpgrade netcf-develUpgrade swtpm-develUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade lua-guestfsUpgrade ruby-hivexUpgrade libguestfs-gobjectUpgrade libvirtUpgrade swtpm-libsUpgrade virt-dibUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-glusterUpgrade libvirt-nssUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-gfs2Upgrade libnbd-bash-completionUpgrade libguestfs-applianceUpgrade libvirt-daemon-config-networkUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-device-usb-hostUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbdUpgrade seabiosUpgrade nbdkit-basic-pluginsUpgrade libvirt-docsUpgrade seavgabios-binUpgrade libiscsi-develUpgrade nbdkit-basic-filtersUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade swtpmUpgrade qemu-imgUpgrade python3-libnbdUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javadocUpgrade perl-hivexUpgrade libvirt-libsUpgrade libguestfs-toolsUpgrade qemu-kvm-coreUpgrade nbdkit-tar-filterUpgrade nbdkit-python-pluginUpgrade ruby-libguestfsUpgrade libvirt-lock-sanlockUpgrade nbdkit-xz-filterUpgrade swtpm-toolsUpgrade python3-libvirtUpgrade nbdfuseUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-VirtUpgrade libvirt-develUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-rbdUpgrade qemu-kvmUpgrade sgabios-binUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemonUpgrade libguestfs-gobject-develUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade python3-hivexUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-rescueUpgrade libguestfsUpgrade libguestfs-man-pages-ukUpgrade nbdkit-linuxdisk-pluginUpgrade libtpmsUpgrade qemu-kvm-block-iscsiUpgrade virt-v2v-bash-completionUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade libiscsiUpgrade nbdkit-serverUpgrade libguestfs-winsupportUpgrade libguestfs-rsyncUpgrade virt-v2v-man-pages-ukUpgrade qemu-kvm-block-sshUpgrade nbdkit-nbd-pluginUpgrade nbdkitUpgrade libvirt-wiresharkUpgrade libvirt-dbusUpgrade libnbdUpgrade libguestfs-bash-completionUpgrade nbdkit-gzip-pluginUpgrade nbdkit-example-pluginsUpgrade libiscsi-utilsUpgrade libtpms-develUpgrade libnbd-develUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-tar-pluginUpgrade nbdkit-curl-pluginUpgrade nbdkit-bash-completionUpgrade hivex-develUpgrade netcfUpgrade nbdkit-vddk-pluginUpgrade swtpm-tools-pkcs11Upgrade python3-libguestfs | Apr 28, 2026 | Dec 14, 2025 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-x86-xenUpgrade qemu-system-modules-openglUpgrade qemu-system-armUpgrade qemu-system-modules-spiceUpgrade qemu-system-sparcUpgrade qemu-system-riscvUpgrade qemu-system-guiUpgrade qemu-system-commonUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-xenUpgrade qemu-system-dataUpgrade qemu-system-x86 | Mar 9, 2026 | Mar 4, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub