The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-spiceUpgrade qemu-chardev-baumUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade qemu-audio-jackUpgrade qemu-s390xUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-block-nfsUpgrade qemu-langUpgrade qemu-docUpgrade qemu-audio-pipewireUpgrade qemu-imgUpgrade qemu-pr-helperUpgrade qemu-ivshmem-toolsUpgrade qemu-extraUpgrade qemu-ui-openglUpgrade qemu-vhost-user-gpuUpgrade qemu-armUpgrade qemuUpgrade qemu-accel-qtestUpgrade qemu-accel-tcg-x86Upgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-headlessUpgrade qemu-ppcUpgrade qemu-block-iscsiUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-guest-agentUpgrade qemu-hw-usb-smartcardUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade qemu-linux-userUpgrade qemu-hw-usb-hostUpgrade qemu-audio-dbusUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-vmsr-helperUpgrade qemu-ui-dbusUpgrade qemu-toolsUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-SLOF | Apr 23, 2026 | Apr 20, 2026 |
| Ubuntu | — | Upgrade qemu-system-dataUpgrade qemu-systemUpgrade qemu-system-modules-spiceUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-modules-openglUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-guiUpgrade qemu-system-x86-xenUpgrade qemu-system-miscUpgrade qemu-system-riscvUpgrade qemu-system-commonUpgrade qemu-system-sparcUpgrade qemu-system-xen | Apr 10, 2026 | Mar 3, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub