[CLSA-2026:1786357174] qemu-kvm: Fix of CVE-2026-48914
Type:
security
Severity:
Moderate
Release date:
2026-08-13 05:01:07 UTC
Description:
- CVE-2026-48914: fix out-of-bounds heap write in virtio-blk VIRTIO_BLK_T_SCSI_CMD handling by validating the virtio_scsi_inhdr descriptor size
CVEs fixed:
Updated packages:
  • qemu-guest-agent-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:93e9173ddc8a035c6cea8ccfff1ad1de2fcfe742c93edf799265ce262ac1362c
  • qemu-img-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:6c43afafdd6f8eb05076b90ed79d24cbb2276a61d4ed49a18d9dc57b570d037a
  • qemu-kvm-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:f6dbdbb70d9b9ff65b59edf00b651d4d0d072669ac9d0eee04f87396e03f555a
  • qemu-kvm-audio-dbus-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:880fbe8f3e4b0a14fc4872cef5b0356aee9b8c773bf3c956e4bc929369ff14da
  • qemu-kvm-audio-pa-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:9f9747438a18be2f486e039da365b47dae4bc0f204e62194858f280ba2dac1fe
  • qemu-kvm-block-blkio-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:e28ef039cb269d8aac843a2d63e1428275614fedbd056db70ea5121233b079b0
  • qemu-kvm-block-curl-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:e8e5e4e51ed18964e8cf3df520542d57b6cdf2a0a86cd46fb815b03ccbdea1fc
  • qemu-kvm-block-rbd-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:96491e9a7ec006940bc532115c4931166443998780b9486558ffc8f0f30af9fd
  • qemu-kvm-common-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:d6d296bd040f73e19f1e481f142a774eac54595a60792ac54081e72cdc2a5723
  • qemu-kvm-core-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:7f84fbd3ea65da4fa18dd4d2df53c75c969c840ccdf769efc70e1f206c3a8b7b
  • qemu-kvm-device-display-virtio-gpu-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:93e0a15c897eabf9d55ec3e80dd350d3b200110cedc10ceff061ed1f28567fbf
  • qemu-kvm-device-display-virtio-gpu-pci-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:7f37df86740f73f0c2cb107fc6ffe10d5352efaa2e448eac8696b3e4e1af9b31
  • qemu-kvm-device-display-virtio-vga-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:fc8c88767688cbf66c85fa048b5daf0c293857e2b28fe7f0bcf8bcdc82595b35
  • qemu-kvm-device-usb-host-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:3d88654c4e1cd8d5763ee415b939be607fe1d00e380a8e3810a7ace3735d9c73
  • qemu-kvm-device-usb-redirect-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:dc84f991a325a3bb7e987ec28a1adaf830ff06534c4b73fa98ce32355a38f746
  • qemu-kvm-docs-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:e3c127ace4a560368fb48674008982c713b77972b4aafd29590b41b64cdd73c5
  • qemu-kvm-tests-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:ee22297486c8cad70739a83b620b36c5a4325de5b98b208454cf7bf6ff6080e0
  • qemu-kvm-tools-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:6f98bb1885c450d6ea4c5793788aaa5d44f8a6b4b19770252717f05f4a16367f
  • qemu-kvm-ui-dbus-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:97dad38327f262c39481798060ca52311b108454e54856e50e96fe99c9c2bdf1
  • qemu-kvm-ui-egl-headless-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:37fddf3fa8ef205f9a9f848a0716f357b271d7664fdb7ab9132ff5e01ad01c35
  • qemu-kvm-ui-opengl-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:3ffc161d4f8223e571f8855d98937b3b1fa9b5a40cefc253ae7175378d8f56c7
  • qemu-pr-helper-9.1.0-15.el9_6.9.alma.1.tuxcare.els2.x86_64.rpm
    sha:a0037e6b02e7d182c0136eb7ceea2edcc9f982f4bcadcaa8150a154f0a976da9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.