A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-pr-helperUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvm-coreUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-common | Aug 2, 2026 | Jul 14, 2026 |
| Amazon Linux Ami 2 | — | Upgrade qemu-ui-sdlUpgrade qemu-user-staticUpgrade qemu-audio-sdlUpgrade qemu-block-sshUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-kvm-coreUpgrade qemu-block-nfsUpgrade qemu-imgUpgrade qemu-system-x86Upgrade qemu-audio-ossUpgrade qemu-user-binfmtUpgrade qemu-block-rbdUpgrade qemu-block-dmgUpgrade qemu-commonUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-userUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemu-block-curlUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-alsaUpgrade qemu-debuginfoUpgrade qemu-block-iscsi | Jul 8, 2026 | Jul 8, 2026 |
| Debian | — | Upgrade qemu | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade qemu-kvm-ui-openglUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-ccwNo solution existsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-usb-host | Jul 16, 2026 | May 26, 2026 |
| Rocky_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-pr-helperUpgrade qemu-imgUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-coreUpgrade qemu-kvm-commonUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-display-virtio-gpu-pci | Jul 17, 2026 | Jul 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub