The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libguestfs-rsyncUpgrade libvirt-daemon-kvmUpgrade libguestfs-toolsUpgrade libvirt-daemon-config-networkUpgrade hivexUpgrade libguestfs-javaUpgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilterUpgrade libtpms-develUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-secretUpgrade hivex-develUpgrade nbdkit-example-pluginsUpgrade libguestfs-java-develUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-client-qemuUpgrade virt-dibUpgrade swtpmUpgrade nbdfuseUpgrade perl-Sys-VirtUpgrade libguestfs-javadocUpgrade libvirt-libsUpgrade qemu-kvm-coreUpgrade libguestfs-man-pages-jaUpgrade perl-hivexUpgrade superminUpgrade ruby-hivexUpgrade libvirt-wiresharkUpgrade libguestfs-tools-cUpgrade nbdkit-tmpdisk-pluginUpgrade libiscsiUpgrade netcf-libsUpgrade libvirt-daemon-driver-interfaceUpgrade seavgabios-binUpgrade libnbd-bash-completionUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-develUpgrade nbdkit-gzip-filterUpgrade virt-v2v-man-pages-ukUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-curl-pluginUpgrade nbdkit-linuxdisk-pluginUpgrade netcfUpgrade qemu-kvm-commonUpgrade nbdkit-ssh-pluginUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-docsUpgrade nbdkitUpgrade qemu-virtiofsdUpgrade sgabiosUpgrade sgabios-binUpgrade swtpm-develUpgrade libvirt-daemon-config-nwfilterUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-dbusUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-bash-completionUpgrade nbdkit-nbd-pluginUpgrade libvirt-lock-sanlockUpgrade virt-v2v-man-pages-jaUpgrade nbdkit-basic-pluginsUpgrade libguestfs-rescueUpgrade libguestfsUpgrade qemu-kvm-block-sshUpgrade python3-libguestfsUpgrade libnbdUpgrade seabiosUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-gzip-pluginUpgrade libtpmsUpgrade libguestfs-winsupportUpgrade libguestfs-inspect-iconsUpgrade python3-hivexUpgrade nbdkit-vddk-pluginUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemonUpgrade libvirt-clientUpgrade libiscsi-develUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade libguestfs-applianceUpgrade qemu-kvm-block-rbdUpgrade python3-libnbdUpgrade swtpm-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libnbd-develUpgrade nbdkit-tar-pluginUpgrade nbdkit-develUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsi-utilsUpgrade python3-libvirtUpgrade virt-v2v-bash-completionUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-curlUpgrade libvirt-nssUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-glusterUpgrade nbdkit-serverUpgrade supermin-develUpgrade qemu-guest-agentUpgrade nbdkit-xz-filterUpgrade nbdkit-tar-filterUpgrade nbdkit-python-pluginUpgrade libvirtUpgrade libguestfs-bash-completionUpgrade qemu-kvmUpgrade swtpm-toolsUpgrade perl-Sys-Guestfs | Apr 28, 2026 | Jan 9, 2026 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-hw-usb-hostUpgrade qemu-block-rbdUpgrade qemu-SLOFUpgrade qemu-microvmUpgrade qemuUpgrade qemu-ui-dbusUpgrade qemu-audio-jackUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-extraUpgrade qemu-vmsr-helperUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-dbusUpgrade qemu-vgabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-headlessUpgrade qemu-ppcUpgrade qemu-imgUpgrade qemu-docUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-accel-tcg-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-ipxeUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-block-glusterUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-block-dmgUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-accel-qtestUpgrade qemu-ui-spice-coreUpgrade qemu-linux-userUpgrade qemu-chardev-spiceUpgrade qemu-audio-pipewireUpgrade qemu-pr-helperUpgrade qemu-spice | Feb 12, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-commonUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-xenUpgrade qemu-system-dataUpgrade qemu-system-mipsUpgrade qemu-system-modules-spiceUpgrade qemu-system-guiUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-modules-openglUpgrade qemu-system-x86-xenUpgrade qemu-system-riscvUpgrade qemu-system-s390x | Mar 9, 2026 | Mar 4, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub