{"id":"CVE-2026-48914","aliases":["ALSA-2026:39311","ALSA-2026:58571","AZL-90138","BELL-CVE-2026-48914","CLSA-2026-1784806096","CLSA-2026-1786357174","DEBIAN-CVE-2026-48914","EUVD-2026-36408","GHSA-4hmh-vx7h-h98p","MGASA-2026-0334","OESA-2026-2861","OESA-2026-2951","OESA-2026-2952","RHSA-2026:39311","RHSA-2026:58571","RLSA-2026:39311","RLSA-2026:58571","SUSE-SU-2026:22550-1","SUSE-SU-2026:22576-1","SUSE-SU-2026:3038-1","UBUNTU-CVE-2026-48914","openSUSE-SU-2026:11250-1","openSUSE-SU-2026:21253-1"],"status":"published","title":"Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00158,"percentile":0.05043,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-06-12T09:42:36Z","modified":"2026-11-06T10:04:46Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"qemu-guest-agent","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-img","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-audio-pa","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-block-blkio","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-block-curl","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-block-rbd","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-common","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-core","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-gpu","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-gpu-ccw","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-gpu-pci","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-vga","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-usb-host","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-usb-redirect","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-docs","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-tools","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-ui-egl-headless","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-kvm-ui-opengl","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"qemu-pr-helper","fixed_in":["17:10.1.0-17.el9_8.4.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-guest-agent","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-img","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-audio-pa","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-block-blkio","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-block-curl","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-block-rbd","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-common","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-core","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-gpu","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-gpu-ccw","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-gpu-pci","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-vga","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-usb-host","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-usb-redirect","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-docs","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-tools","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-ui-egl-headless","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-kvm-ui-opengl","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"qemu-pr-helper","fixed_in":["18:10.1.0-16.el10_2.5.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"qemu","fixed_in":["9.1.0-8"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"qemu","fixed_in":["10.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"qemu","fixed_in":["11.0.2-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-guest-agent","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-img","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-audio-pa","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-block-curl","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-block-rbd","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-common","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-core","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-display-virtio-gpu","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-display-virtio-gpu-pci","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-display-virtio-vga","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-usb-host","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-usb-redirect","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-docs","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-tests","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-tools","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-ui-egl-headless","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-ui-opengl","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-pr-helper","fixed_in":["17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-guest-agent","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-img","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-audio-dbus","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-audio-pa","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-block-blkio","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-block-curl","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-block-rbd","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-common","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-core","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-display-virtio-gpu","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-display-virtio-gpu-pci","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-display-virtio-vga","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-usb-host","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-usb-redirect","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-docs","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-tests","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-tools","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-ui-dbus","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-ui-egl-headless","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-ui-opengl","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-pr-helper","fixed_in":["17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:10.0.11+ds-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:11.0.2+ds-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"qemu","fixed_in":["6.2.0-114.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-guest-agent","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-guest-agent-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-img","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-img-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-audio-dbus-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-audio-pa","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-audio-pa-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-blkio","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-blkio-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-curl","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-curl-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-rbd","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-rbd-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-common","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-common-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-core","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-core-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-debugsource","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-ccw","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-ccw-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-pci","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-pci-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-vga","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-vga-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-host","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-host-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-redirect","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-redirect-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-docs","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-tests-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-tools","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-tools-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-dbus-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-egl-headless","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-egl-headless-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-opengl","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-opengl-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-pr-helper","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-pr-helper-debuginfo","fixed_in":["17:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-guest-agent","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-guest-agent-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-img","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-img-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-audio-dbus-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-audio-pa","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-audio-pa-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-blkio","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-blkio-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-curl","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-curl-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-rbd","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-rbd-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-common","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-common-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-core","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-core-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-debugsource","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-ccw","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-ccw-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-pci","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-pci-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-vga","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-vga-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-host","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-host-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-redirect","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-redirect-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-docs","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-tests-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-tools","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-tools-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-dbus-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-egl-headless","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-egl-headless-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-opengl","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-opengl-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-pr-helper","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-pr-helper-debuginfo","fixed_in":["18:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"qemu-kvm","fixed_in":["7:10.1.0-17.el9_8.4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"qemu-kvm","fixed_in":["8:10.1.0-16.el10_2.5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"qemu","fixed_in":["11.0.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-audio-pa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-block-blkio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-gpu-ccw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-gpu-pci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-display-virtio-vga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-usb-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-device-usb-redirect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-ui-egl-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-kvm-ui-opengl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qemu-pr-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-audio-pa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-block-blkio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-gpu-ccw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-gpu-pci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-display-virtio-vga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-usb-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-device-usb-redirect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-ui-egl-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-kvm-ui-opengl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"qemu-pr-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.0-8"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0-r1"},{"fixed":"10.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.2-r0"},{"fixed":"11.0.2-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-audio-pa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-display-virtio-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-display-virtio-gpu-pci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-display-virtio-vga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-usb-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-device-usb-redirect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-ui-egl-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-kvm-ui-opengl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"qemu-pr-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-audio-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-audio-pa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-block-blkio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-display-virtio-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-display-virtio-gpu-pci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-display-virtio-vga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-usb-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-device-usb-redirect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-ui-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-ui-egl-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-kvm-ui-opengl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"qemu-pr-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:9.1.0-15.el9_6.9.alma.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.0.0+ds-1","1:10.0.0+ds-2","1:10.0.0+ds-2~bpo12+1","1:10.0.0+ds-2~bpo12+2","1:10.0.0~rc0+ds-1","1:10.0.0~rc0+ds-2","1:10.0.0~rc1+ds-1","1:10.0.0~rc1+ds-2","1:10.0.0~rc2+ds-1","1:10.0.0~rc2+ds-2","1:10.0.0~rc3+ds-1","1:10.0.0~rc3+ds-2","1:10.0.2+ds-1","1:10.0.2+ds-2","1:10.0.2+ds-2~bpo12+1","1:10.0.3+ds-1","1:10.0.3+ds-2","1:10.0.3+ds-3","1:10.0.3+ds-4","1:10.1.0+ds-1","1:10.1.0+ds-2","1:10.1.0+ds-3","1:10.1.0+ds-4","1:10.1.0+ds-5","1:10.1.0~rc0+ds-1","1:10.1.0~rc0+ds-2","1:10.1.0~rc0+ds-3","1:10.1.0~rc0+ds-4","1:10.1.0~rc1+ds-1","1:10.1.0~rc1+ds-1a","1:10.1.0~rc1+ds-1b","1:10.1.0~rc1+ds-2","1:10.1.0~rc1+ds-3","1:10.1.0~rc2+ds-1","1:10.1.0~rc3+ds-1","1:10.1.0~rc3+ds-2","1:10.1.1+ds-1","1:10.1.2+ds-1","1:10.1.2+ds-2","1:10.1.2+ds-3","1:10.1.3+ds-1","1:10.2.0+ds-1","1:10.2.0+ds-2","1:10.2.0~rc1+ds-1","1:10.2.1+ds-1","1:10.2.2+ds-1","1:11.0.0+ds-1","1:11.0.0+ds-2","1:11.0.0~rc0+ds-1","1:11.0.0~rc0+ds-2","1:11.0.0~rc1+ds-1","1:11.0.0~rc1+ds-2","1:11.0.0~rc1+ds-3","1:11.0.0~rc2+ds-1","1:11.0.0~rc2+ds-2","1:11.0.0~rc3+ds-1","1:11.0.1+ds-1","1:11.0.2+ds-1","1:11.0.2+ds-2","1:11.0.2+ds-2~bpo13+1","1:11.0.3+ds-1","1:11.0.3+ds-2","1:11.1.0+ds-1","1:11.1.0+ds-2","1:11.1.0~rc0+ds-1","1:11.1.0~rc0+ds-2","1:11.1.0~rc1+ds-1","1:11.1.0~rc3+ds-1","1:11.1.0~rc3+ds-2","1:11.1.1+ds-1","1:11.1.2+ds-1","1:11.1.2+ds-1~bpo13+1","1:11.1.2+ds-2","1:11.1.2+ds-3","1:11.1.2+ds-3~bpo13+1","1:11.1.2+ds-3~bpo13+2","1:11.1.2+ds-3~bpo13+3","1:11.1.2+ds-3~bpo13+4","1:11.1.3+ds-1","1:7.2+dfsg-7","1:7.2+dfsg-7+deb12u1","1:7.2+dfsg-7+deb12u10","1:7.2+dfsg-7+deb12u11","1:7.2+dfsg-7+deb12u12","1:7.2+dfsg-7+deb12u13","1:7.2+dfsg-7+deb12u14","1:7.2+dfsg-7+deb12u15","1:7.2+dfsg-7+deb12u16","1:7.2+dfsg-7+deb12u17","1:7.2+dfsg-7+deb12u18","1:7.2+dfsg-7+deb12u2","1:7.2+dfsg-7+deb12u2~bpo11+1","1:7.2+dfsg-7+deb12u3","1:7.2+dfsg-7+deb12u4","1:7.2+dfsg-7+deb12u5","1:7.2+dfsg-7+deb12u6","1:7.2+dfsg-7+deb12u7","1:7.2+dfsg-7+deb12u8","1:7.2+dfsg-7+deb12u9","1:8.0+dfsg-1","1:8.0+dfsg-2","1:8.0+dfsg-3","1:8.0+dfsg-4","1:8.0.2+dfsg-1","1:8.0.2+dfsg-2","1:8.0.2+dfsg-3","1:8.0.3+dfsg-1","1:8.0.3+dfsg-1~bpo12+1","1:8.0.3+dfsg-2","1:8.0.3+dfsg-3","1:8.0.3+dfsg-4","1:8.0.3+dfsg-5","1:8.0.4+dfsg-1","1:8.0.4+dfsg-1~bpo12+1","1:8.0.4+dfsg-2","1:8.0.4+dfsg-3","1:8.0~rc2+dfsg-1","1:8.0~rc3+dfsg-1","1:8.0~rc3+dfsg-2","1:8.0~rc4+dfsg-1","1:8.0~rc4+dfsg-2","1:8.1.0+ds-1","1:8.1.0+ds-1~exp1","1:8.1.0+ds-1~exp2","1:8.1.0+ds-2","1:8.1.0+ds-3","1:8.1.0+ds-4","1:8.1.0+ds-5","1:8.1.0+ds-6","1:8.1.0~rc2+dfsg-1","1:8.1.0~rc3+dfsg-1","1:8.1.0~rc3+dfsg-2","1:8.1.0~rc4+ds-1","1:8.1.0~rc4+ds-2","1:8.1.0~rc4+ds-3","1:8.1.0~rc4+ds-4","1:8.1.1+ds-1","1:8.1.1+ds-2","1:8.1.1+ds-2~bpo12+1","1:8.1.2+ds-1","1:8.1.2+ds-1~bpo12+1","1:8.1.3+ds-1","1:8.2.0+ds-1","1:8.2.0+ds-2","1:8.2.0+ds-3","1:8.2.0+ds-4","1:8.2.0+ds-5","1:8.2.0+ds-5~bpo12+1","1:8.2.0~rc0+ds-1","1:8.2.0~rc1+ds-1","1:8.2.0~rc2+ds-1","1:8.2.1+ds-1","1:8.2.1+ds-1~bpo12+1","1:8.2.1+ds-2","1:8.2.2+ds-1","1:8.2.2+ds-2","1:8.2.3+ds-1","1:8.2.3+ds-2","1:8.2.4+ds-1","1:8.2.4+ds-2","1:8.2.5+ds-1","1:8.2.5+ds-2","1:9.0.0~rc0+ds-1","1:9.0.0~rc0+ds-2","1:9.0.0~rc2+ds-1","1:9.0.1+ds-1","1:9.0.1+ds-1~bpo12+1","1:9.0.2+ds-1","1:9.0.2+ds-1~bpo12+1","1:9.0.2+ds-2","1:9.0.2+ds-3","1:9.0.2+ds-4","1:9.0.2+ds-5","1:9.0.2+ds-6","1:9.0.2+ds-7","1:9.1.0+ds-1","1:9.1.0+ds-2","1:9.1.0+ds-3","1:9.1.0+ds-4","1:9.1.0+ds-5","1:9.1.0+ds-6","1:9.1.0+ds-7","1:9.1.0+ds-8","1:9.1.0+ds-9~exp0","1:9.1.0~rc0+ds-1","1:9.1.0~rc0+ds-2","1:9.1.0~rc0+ds-3","1:9.1.1+ds-1","1:9.1.1+ds-2","1:9.1.1+ds-2~bpo12+1","1:9.1.1+ds-3","1:9.1.1+ds-4","1:9.1.1+ds-5","1:9.1.2+ds-1","1:9.1.2+ds-1~bpo12+1","1:9.2.0+ds-1","1:9.2.0+ds-1~exp1","1:9.2.0+ds-2","1:9.2.0+ds-3","1:9.2.0+ds-3~bpo12+1","1:9.2.0+ds-3~bpo12+2","1:9.2.0+ds-4","1:9.2.0+ds-5","1:9.2.0~rc0+ds-1","1:9.2.0~rc3+ds-1","1:9.2.1+ds-1","1:9.2.2+ds-1","1:9.2.2+ds-1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.0.11+ds-0+deb13u1"}]}],"versions":["1:10.0.10+ds-0+deb13u1","1:10.0.2+ds-2","1:10.0.2+ds-2+deb13u1","1:10.0.2+ds-2+deb13u1~bpo12+1","1:10.0.3+ds-0+deb13u1","1:10.0.3+ds-1","1:10.0.3+ds-2","1:10.0.3+ds-3","1:10.0.3+ds-4","1:10.0.6+ds-0+deb13u1","1:10.0.6+ds-0+deb13u2","1:10.0.7+ds-0+deb13u1","1:10.0.8+ds-0+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.2+ds-1"}]}],"versions":["1:10.0.2+ds-2","1:10.0.3+ds-1","1:10.0.3+ds-2","1:10.0.3+ds-3","1:10.0.3+ds-4","1:10.1.0+ds-1","1:10.1.0+ds-2","1:10.1.0+ds-3","1:10.1.0+ds-4","1:10.1.0+ds-5","1:10.1.0~rc0+ds-1","1:10.1.0~rc0+ds-2","1:10.1.0~rc0+ds-3","1:10.1.0~rc0+ds-4","1:10.1.0~rc1+ds-1","1:10.1.0~rc1+ds-1a","1:10.1.0~rc1+ds-1b","1:10.1.0~rc1+ds-2","1:10.1.0~rc1+ds-3","1:10.1.0~rc2+ds-1","1:10.1.0~rc3+ds-1","1:10.1.0~rc3+ds-2","1:10.1.1+ds-1","1:10.1.2+ds-1","1:10.1.2+ds-2","1:10.1.2+ds-3","1:10.1.3+ds-1","1:10.2.0+ds-1","1:10.2.0+ds-2","1:10.2.0~rc1+ds-1","1:10.2.1+ds-1","1:10.2.2+ds-1","1:11.0.0+ds-1","1:11.0.0+ds-2","1:11.0.0~rc0+ds-1","1:11.0.0~rc0+ds-2","1:11.0.0~rc1+ds-1","1:11.0.0~rc1+ds-2","1:11.0.0~rc1+ds-3","1:11.0.0~rc2+ds-1","1:11.0.0~rc2+ds-2","1:11.0.0~rc3+ds-1","1:11.0.1+ds-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.4-2.mga10"}]}],"bundled":16},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-80.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-114.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-56.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-guest-agent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-img-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-audio-dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-audio-pa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-audio-pa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-blkio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-blkio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-block-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-ccw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-ccw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-pci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-gpu-pci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-vga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-display-virtio-vga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-redirect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-device-usb-redirect-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-egl-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-egl-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-opengl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-kvm-ui-opengl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-pr-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qemu-pr-helper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-guest-agent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-img-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-audio-dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-audio-pa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-audio-pa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-blkio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-blkio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-block-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-ccw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-ccw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-pci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-gpu-pci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-vga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-display-virtio-vga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-redirect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-device-usb-redirect-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-egl-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-egl-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-opengl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-kvm-ui-opengl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-pr-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"qemu-pr-helper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:10.1.0-17.el9_8.4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:10.1.0-16.el10_2.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.11-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.11-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.11-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.11-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.11-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.4-150700.3.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.4-150700.3.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.4-150700.3.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.4-150700.3.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3","2.0.0~rc1+dfsg-0ubuntu3.1","2.0.0+dfsg-2ubuntu1","2.0.0+dfsg-2ubuntu1.1","2.0.0+dfsg-2ubuntu1.2","2.0.0+dfsg-2ubuntu1.3","2.0.0+dfsg-2ubuntu1.5","2.0.0+dfsg-2ubuntu1.6","2.0.0+dfsg-2ubuntu1.7","2.0.0+dfsg-2ubuntu1.8","2.0.0+dfsg-2ubuntu1.9","2.0.0+dfsg-2ubuntu1.10","2.0.0+dfsg-2ubuntu1.11","2.0.0+dfsg-2ubuntu1.13","2.0.0+dfsg-2ubuntu1.14","2.0.0+dfsg-2ubuntu1.15","2.0.0+dfsg-2ubuntu1.16","2.0.0+dfsg-2ubuntu1.17","2.0.0+dfsg-2ubuntu1.18","2.0.0+dfsg-2ubuntu1.19","2.0.0+dfsg-2ubuntu1.20","2.0.0+dfsg-2ubuntu1.21","2.0.0+dfsg-2ubuntu1.22","2.0.0+dfsg-2ubuntu1.24","2.0.0+dfsg-2ubuntu1.25","2.0.0+dfsg-2ubuntu1.26","2.0.0+dfsg-2ubuntu1.27","2.0.0+dfsg-2ubuntu1.28","2.0.0+dfsg-2ubuntu1.29","2.0.0+dfsg-2ubuntu1.30","2.0.0+dfsg-2ubuntu1.31","2.0.0+dfsg-2ubuntu1.32","2.0.0+dfsg-2ubuntu1.33","2.0.0+dfsg-2ubuntu1.34","2.0.0+dfsg-2ubuntu1.35","2.0.0+dfsg-2ubuntu1.36","2.0.0+dfsg-2ubuntu1.38","2.0.0+dfsg-2ubuntu1.39","2.0.0+dfsg-2ubuntu1.40","2.0.0+dfsg-2ubuntu1.41","2.0.0+dfsg-2ubuntu1.42","2.0.0+dfsg-2ubuntu1.43","2.0.0+dfsg-2ubuntu1.44","2.0.0+dfsg-2ubuntu1.45","2.0.0+dfsg-2ubuntu1.46","2.0.0+dfsg-2ubuntu1.47","2.0.0+dfsg-2ubuntu1.47+esm1","2.0.0+dfsg-2ubuntu1.47+esm2","2.0.0+dfsg-2ubuntu1.47+esm3","2.0.0+dfsg-2ubuntu1.47+esm4","2.0.0+dfsg-2ubuntu1.47+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.3+dfsg-5ubuntu9","1:2.3+dfsg-5ubuntu10","1:2.4+dfsg-4ubuntu1","1:2.4+dfsg-4ubuntu2","1:2.4+dfsg-4ubuntu3","1:2.4+dfsg-5ubuntu3","1:2.5+dfsg-1ubuntu2","1:2.5+dfsg-1ubuntu3","1:2.5+dfsg-1ubuntu4","1:2.5+dfsg-1ubuntu5","1:2.5+dfsg-5ubuntu1","1:2.5+dfsg-5ubuntu2","1:2.5+dfsg-5ubuntu4","1:2.5+dfsg-5ubuntu6","1:2.5+dfsg-5ubuntu7","1:2.5+dfsg-5ubuntu10","1:2.5+dfsg-5ubuntu10.1","1:2.5+dfsg-5ubuntu10.2","1:2.5+dfsg-5ubuntu10.3","1:2.5+dfsg-5ubuntu10.4","1:2.5+dfsg-5ubuntu10.5","1:2.5+dfsg-5ubuntu10.6","1:2.5+dfsg-5ubuntu10.7","1:2.5+dfsg-5ubuntu10.8","1:2.5+dfsg-5ubuntu10.9","1:2.5+dfsg-5ubuntu10.10","1:2.5+dfsg-5ubuntu10.11","1:2.5+dfsg-5ubuntu10.13","1:2.5+dfsg-5ubuntu10.14","1:2.5+dfsg-5ubuntu10.15","1:2.5+dfsg-5ubuntu10.16","1:2.5+dfsg-5ubuntu10.20","1:2.5+dfsg-5ubuntu10.21","1:2.5+dfsg-5ubuntu10.22","1:2.5+dfsg-5ubuntu10.24","1:2.5+dfsg-5ubuntu10.25","1:2.5+dfsg-5ubuntu10.26","1:2.5+dfsg-5ubuntu10.28","1:2.5+dfsg-5ubuntu10.29","1:2.5+dfsg-5ubuntu10.30","1:2.5+dfsg-5ubuntu10.31","1:2.5+dfsg-5ubuntu10.32","1:2.5+dfsg-5ubuntu10.33","1:2.5+dfsg-5ubuntu10.34","1:2.5+dfsg-5ubuntu10.35","1:2.5+dfsg-5ubuntu10.36","1:2.5+dfsg-5ubuntu10.37","1:2.5+dfsg-5ubuntu10.38","1:2.5+dfsg-5ubuntu10.39","1:2.5+dfsg-5ubuntu10.40","1:2.5+dfsg-5ubuntu10.41","1:2.5+dfsg-5ubuntu10.42","1:2.5+dfsg-5ubuntu10.43","1:2.5+dfsg-5ubuntu10.44","1:2.5+dfsg-5ubuntu10.45","1:2.5+dfsg-5ubuntu10.46","1:2.5+dfsg-5ubuntu10.47","1:2.5+dfsg-5ubuntu10.48","1:2.5+dfsg-5ubuntu10.49","1:2.5+dfsg-5ubuntu10.51","1:2.5+dfsg-5ubuntu10.51+esm1","1:2.5+dfsg-5ubuntu10.51+esm2","1:2.5+dfsg-5ubuntu10.51+esm3","1:2.5+dfsg-5ubuntu10.51+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.10+dfsg-0ubuntu3","1:2.10+dfsg-0ubuntu4","1:2.10+dfsg-0ubuntu5","1:2.11+dfsg-1ubuntu1","1:2.11+dfsg-1ubuntu2","1:2.11+dfsg-1ubuntu4","1:2.11+dfsg-1ubuntu5","1:2.11+dfsg-1ubuntu6","1:2.11+dfsg-1ubuntu7","1:2.11+dfsg-1ubuntu7.1","1:2.11+dfsg-1ubuntu7.2","1:2.11+dfsg-1ubuntu7.3","1:2.11+dfsg-1ubuntu7.4","1:2.11+dfsg-1ubuntu7.5","1:2.11+dfsg-1ubuntu7.6","1:2.11+dfsg-1ubuntu7.7","1:2.11+dfsg-1ubuntu7.8","1:2.11+dfsg-1ubuntu7.9","1:2.11+dfsg-1ubuntu7.10","1:2.11+dfsg-1ubuntu7.12","1:2.11+dfsg-1ubuntu7.13","1:2.11+dfsg-1ubuntu7.14","1:2.11+dfsg-1ubuntu7.15","1:2.11+dfsg-1ubuntu7.17","1:2.11+dfsg-1ubuntu7.18","1:2.11+dfsg-1ubuntu7.19","1:2.11+dfsg-1ubuntu7.20","1:2.11+dfsg-1ubuntu7.21","1:2.11+dfsg-1ubuntu7.22","1:2.11+dfsg-1ubuntu7.23","1:2.11+dfsg-1ubuntu7.25","1:2.11+dfsg-1ubuntu7.26","1:2.11+dfsg-1ubuntu7.27","1:2.11+dfsg-1ubuntu7.28","1:2.11+dfsg-1ubuntu7.29","1:2.11+dfsg-1ubuntu7.31","1:2.11+dfsg-1ubuntu7.32","1:2.11+dfsg-1ubuntu7.33","1:2.11+dfsg-1ubuntu7.34","1:2.11+dfsg-1ubuntu7.35","1:2.11+dfsg-1ubuntu7.36","1:2.11+dfsg-1ubuntu7.37","1:2.11+dfsg-1ubuntu7.38","1:2.11+dfsg-1ubuntu7.39","1:2.11+dfsg-1ubuntu7.40","1:2.11+dfsg-1ubuntu7.41","1:2.11+dfsg-1ubuntu7.42","1:2.11+dfsg-1ubuntu7.42+esm1","1:2.11+dfsg-1ubuntu7.42+esm2","1:2.11+dfsg-1ubuntu7.42+esm5","1:2.11+dfsg-1ubuntu7.42+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.0+dfsg-0ubuntu9","1:4.0+dfsg-0ubuntu10","1:4.2-1ubuntu1","1:4.2-1ubuntu2","1:4.2-3ubuntu1","1:4.2-3ubuntu2","1:4.2-3ubuntu3","1:4.2-3ubuntu4","1:4.2-3ubuntu5","1:4.2-3ubuntu6","1:4.2-3ubuntu6.1","1:4.2-3ubuntu6.2","1:4.2-3ubuntu6.3","1:4.2-3ubuntu6.4","1:4.2-3ubuntu6.5","1:4.2-3ubuntu6.6","1:4.2-3ubuntu6.7","1:4.2-3ubuntu6.8","1:4.2-3ubuntu6.9","1:4.2-3ubuntu6.10","1:4.2-3ubuntu6.11","1:4.2-3ubuntu6.12","1:4.2-3ubuntu6.14","1:4.2-3ubuntu6.15","1:4.2-3ubuntu6.16","1:4.2-3ubuntu6.17","1:4.2-3ubuntu6.18","1:4.2-3ubuntu6.19","1:4.2-3ubuntu6.21","1:4.2-3ubuntu6.23","1:4.2-3ubuntu6.24","1:4.2-3ubuntu6.25","1:4.2-3ubuntu6.26","1:4.2-3ubuntu6.27","1:4.2-3ubuntu6.28","1:4.2-3ubuntu6.29","1:4.2-3ubuntu6.30","1:4.2-3ubuntu6.30+esm1","1:4.2-3ubuntu6.30+esm2","1:4.2-3ubuntu6.30+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6.0+dfsg-2expubuntu1","1:6.0+dfsg-2expubuntu2","1:6.0+dfsg-2expubuntu4","1:6.2+dfsg-2ubuntu5","1:6.2+dfsg-2ubuntu6","1:6.2+dfsg-2ubuntu6.1","1:6.2+dfsg-2ubuntu6.2","1:6.2+dfsg-2ubuntu6.3","1:6.2+dfsg-2ubuntu6.4","1:6.2+dfsg-2ubuntu6.5","1:6.2+dfsg-2ubuntu6.6","1:6.2+dfsg-2ubuntu6.7","1:6.2+dfsg-2ubuntu6.8","1:6.2+dfsg-2ubuntu6.9","1:6.2+dfsg-2ubuntu6.10","1:6.2+dfsg-2ubuntu6.11","1:6.2+dfsg-2ubuntu6.12","1:6.2+dfsg-2ubuntu6.13","1:6.2+dfsg-2ubuntu6.14","1:6.2+dfsg-2ubuntu6.15","1:6.2+dfsg-2ubuntu6.16","1:6.2+dfsg-2ubuntu6.17","1:6.2+dfsg-2ubuntu6.18","1:6.2+dfsg-2ubuntu6.19","1:6.2+dfsg-2ubuntu6.21","1:6.2+dfsg-2ubuntu6.22","1:6.2+dfsg-2ubuntu6.23","1:6.2+dfsg-2ubuntu6.24","1:6.2+dfsg-2ubuntu6.25","1:6.2+dfsg-2ubuntu6.26","1:6.2+dfsg-2ubuntu6.27","1:6.2+dfsg-2ubuntu6.28","1:6.2+dfsg-2ubuntu6.29","1:6.2+dfsg-2ubuntu6.30","1:6.2+dfsg-2ubuntu6.31"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.0.4+dfsg-1ubuntu3","1:8.0.4+dfsg-1ubuntu4","1:8.0.4+dfsg-1ubuntu5","1:8.1.3+ds-1ubuntu2","1:8.2.1+ds-1ubuntu1","1:8.2.1+ds-1ubuntu8","1:8.2.1+ds-1ubuntu9","1:8.2.2+ds-0ubuntu1","1:8.2.2+ds-0ubuntu1.2","1:8.2.2+ds-0ubuntu1.4","1:8.2.2+ds-0ubuntu1.5","1:8.2.2+ds-0ubuntu1.6","1:8.2.2+ds-0ubuntu1.7","1:8.2.2+ds-0ubuntu1.8","1:8.2.2+ds-0ubuntu1.9","1:8.2.2+ds-0ubuntu1.10","1:8.2.2+ds-0ubuntu1.11","1:8.2.2+ds-0ubuntu1.12","1:8.2.2+ds-0ubuntu1.13","1:8.2.2+ds-0ubuntu1.14","1:8.2.2+ds-0ubuntu1.15","1:8.2.2+ds-0ubuntu1.16","1:8.2.2+ds-0ubuntu1.17","1:8.2.2+ds-0ubuntu1.18"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.2.1+ds-1ubuntu5","1:10.0.2+ds-1ubuntu1","1:10.0.2+ds-1ubuntu2","1:10.1.0+ds-1ubuntu1","1:10.1.0+ds-5ubuntu1","1:10.1.0+ds-5ubuntu2","1:10.1.0+ds-5ubuntu2.1","1:10.1.0+ds-5ubuntu2.2","1:10.1.0+ds-5ubuntu2.4","1:10.1.0+ds-5ubuntu2.5","1:10.1.0+ds-5ubuntu2.6","1:10.1.0+ds-5ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.2.1+ds-1ubuntu3","1:10.2.1+ds-1ubuntu6","1:11.0.3+ds-2ubuntu1","1:11.0.3+ds-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qemu-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.2.1+ds-1ubuntu4","1:10.2.1+ds-1ubuntu7","1:10.2.1+ds-1ubuntu8","1:11.0.3+ds-2ubuntu2","1:11.0.3+ds-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.1.0+ds-5ubuntu2","1:10.1.0+ds-5ubuntu3","1:10.1.0+ds-5ubuntu4","1:10.1.0+ds-5ubuntu5","1:10.2.1+ds-1ubuntu1","1:10.2.1+ds-1ubuntu2","1:10.2.1+ds-1ubuntu3","1:10.2.1+ds-1ubuntu3.1","1:10.2.1+ds-1ubuntu3.2","1:10.2.1+ds-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qemu-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.2.1+ds-1ubuntu2","1:10.2.1+ds-1ubuntu4","1:10.2.1+ds-1ubuntu4.2","1:10.2.1+ds-1ubuntu4.3","1:10.2.1+ds-1ubuntu4.4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.2-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.11-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.11-160000.1.1"}]}],"bundled":3}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux for nvidia 26"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 5"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:39311","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58571","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48914","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488283","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://lore.kernel.org/qemu-devel/20260526154957.1741622-1-stefanha@redhat.com/","tags":["web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48914","tags":["web","advisory"]},{"url":"https://lore.kernel.org/qemu-devel/20260526154957.1741622-1-stefanha@redhat.com"},{"url":"https://github.com/advisories/GHSA-4hmh-vx7h-h98p"},{"url":"https://bugzilla.redhat.com/2488283","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-39311.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-58571.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-48914","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784806096.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786357174.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48914.json","tags":["advisory"]},{"url":"https://gitlab.com/qemu-project/qemu","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-48914","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0334.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35989","tags":["report"]},{"url":"https://lists.nongnu.org/archive/html/qemu-stable/2026-05/msg00654.html","tags":["web"]},{"url":"https://lists.nongnu.org/archive/html/qemu-stable/2026-06/msg00551.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3886","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2951","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2952","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39311.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48914","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58571.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:39311","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:58571","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622550-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199023","tags":["report"]},{"url":"https://bugzilla.suse.com/1268061","tags":["report"]},{"url":"https://bugzilla.suse.com/1268279","tags":["report"]},{"url":"https://bugzilla.suse.com/1268794","tags":["report"]},{"url":"https://bugzilla.suse.com/1270133","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48914","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622576-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263038-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-48914","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-48914","title":"Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T09:42:36.313Z","modified":"2026-11-05T21:18:38.845Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-05T22:55:20.139479Z"}],"euvd":[{"id":"EUVD-2026-36408","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T09:42:36Z","modified":"2026-11-05T21:18:38Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-05T22:02:08.543452Z"}],"ghsa":[{"id":"GHSA-4hmh-vx7h-h98p","title":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not...","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T12:31:33Z","modified":"2026-08-24T12:31:36Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:10:52.810585Z"}],"nvd":[{"id":"CVE-2026-48914","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T10:16:22.177Z","modified":"2026-11-05T22:18:44.413Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-05T23:57:19.370761Z"}],"osv":[{"id":"BELL-CVE-2026-48914","status":"published","published":"2026-06-13T06:10:43.874721Z","modified":"2026-08-15T07:15:05.957698402Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:24.391068Z"},{"id":"CVE-2026-48914","title":"Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T09:42:36.313Z","modified":"2026-11-07T02:30:20.460171915Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-07T03:08:06.526027Z"},{"id":"DEBIAN-CVE-2026-48914","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T10:16:22.177Z","modified":"2026-11-06T10:04:46.468146239Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"OESA-2026-2861","title":"qemu security update","description":"QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as critical, has been found in QEMU (Virtualization Software) (version unknown).Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.Impacted is confidentiality, integrity, and availability.Upgrading eliminates this vulnerability.(CVE-2026-3886)\n\nA flaw was found in QEMU\u0026apos;s virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.(CVE-2026-48914)","status":"published","published":"2026-07-06T11:11:46Z","modified":"2026-08-18T01:21:14.248807093Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2951","title":"qemu security update","description":"QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in QEMU\u0026apos;s virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.(CVE-2026-48914)","status":"published","published":"2026-07-09T11:11:51Z","modified":"2026-08-18T01:21:16.122243113Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2952","title":"qemu security update","description":"QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as critical, has been found in QEMU (Virtualization Software) (version unknown).Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.Impacted is confidentiality, integrity, and availability.Upgrading eliminates this vulnerability.(CVE-2026-3886)\n\nA flaw was found in QEMU\u0026apos;s virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.(CVE-2026-48914)","status":"published","published":"2026-07-09T11:11:51Z","modified":"2026-08-18T01:21:16.814867958Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:39311","title":"Red Hat Security Advisory: qemu-kvm security update","status":"published","published":"2026-07-15T10:10:18Z","modified":"2026-09-01T10:21:21Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:58571","title":"Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update","status":"published","published":"2026-08-24T10:18:45Z","modified":"2026-09-01T10:26:57Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RLSA-2026:39311","title":"Low: qemu-kvm security update","description":"Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.\n\nSecurity Fix(es):\n\n* qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-15T12:03:43.176942Z","modified":"2026-07-15T12:30:04.918194145Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:58571","title":"Moderate: qemu-kvm security, bug fix, and enhancement update","description":"Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.\n\nSecurity Fix(es):\n\n* qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914)\n\nBug Fix(es) and Enhancement(s):\n\n* qemu-kvm hung during drain after double pause [rhel-10.2.z] (JIRA:Rocky Linux-190702)\n\n* qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z] (JIRA:Rocky Linux-207389)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-24T12:08:18.073383Z","modified":"2026-08-24T12:30:13.694324608Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-48914","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T10:16:00Z","modified":"2026-10-22T23:20:19.993875616Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:33.391918Z"},{"id":"ALSA-2026:39311","title":"Low: qemu-kvm security update","description":"Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.  \n\nSecurity Fix(es):  \n\n  * qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-14T00:00:00Z","modified":"2026-10-29T11:32:35.9911095Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:58571","title":"Moderate: qemu-kvm security, bug fix, and enhancement update","description":"Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.  \n\nSecurity Fix(es):  \n\n  * qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * qemu-kvm hung during drain after double pause [almalinux-10.2.z] (JIRA:AlmaLinux-190702)\n  * qemu-img create/convert fails on target block device with 4k sector size [almalinux-10.2.z] (JIRA:AlmaLinux-207389)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-10-29T11:30:39.661288592Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-90138","title":"CVE-2026-48914 affecting package qemu for versions less than 9.1.0-8","description":"A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.","status":"published","published":"2026-06-12T10:16:22Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.633663Z"},{"id":"CLSA-2026-1784806096","title":"qemu-kvm: Fix of CVE-2026-48914","description":"- CVE-2026-48914: virtio-blk: out-of-bounds heap write via malformed scsi request","status":"published","published":"2026-07-23T11:28:41Z","modified":"2026-10-26T09:30:28.395276012Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1786357174","title":"qemu-kvm: Fix of CVE-2026-48914","description":"- CVE-2026-48914: fix out-of-bounds heap write in virtio-blk VIRTIO_BLK_T_SCSI_CMD handling by validating the virtio_scsi_inhdr descriptor size","status":"published","published":"2026-08-13T05:01:07Z","modified":"2026-10-26T09:31:25.593235162Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"MGASA-2026-0334","title":"Updated qemu packages fix many security vulnerabilities","description":"This update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from\n10.2.4\n","status":"published","published":"2026-08-13T16:40:34Z","modified":"2026-08-13T16:58:46.791228786Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11250-1","title":"qemu-11.0.2-1.1 on GA media","description":"These are all security issues fixed in the qemu-11.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-10T00:00:00Z","modified":"2026-07-11T09:15:07.705053195Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21253-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nUpdate to version 10.0.11.\n\nSecurity issues fixed:\n\n- CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied\n  data in the virtio-gpu driver (bsc#1268061).\n- CVE-2026-48914: heap buffer overflow due to improper size validation in virtio-blk SCSI request handling\n  (bsc#1268794).\n- CVE-2026-48004: heap use-after-free race condition due to missing rename lock in v9fs_co_readdir_many (bsc#1270133).\n\nOther updates and bugfixes:\n\n- Version 10.0.11:\n  * Full backport list here: https://lore.kernel.org/qemu-devel/20260627082646.D825717AB67@think4mjt.localdomain/\n- Version 10.0.10:\n  * Full backport list here: https://lore.kernel.org/qemu-devel/20260528061820.CEE521691A9@think4mjt.localdomain/\n- ppc/spapr: Skip system reset for quiesced CPUs (bsc#1268279).\n- i386/tdx: handle TDG.VP.VMCALL \u003cGetQuote\u003e (jsc#PED-9266).\n- i386/tdx: handle TDG.VP.VMCALL \u003cGetTdVmCallInfo\u003e (jsc#PED-9266).\n- update Linux headers to v6.16-rc3 (jsc#PED-9266).\n- i386/cpu: Warn about why CPUID_EXT_PDCM is not available (jsc#PED-9266).\n- i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check (jsc#PED-9266).\n- [openSUSE] qemu-ga: fix service file against no-autostart (bsc#1199023).\n","status":"published","published":"2026-07-07T17:20:48Z","modified":"2026-07-09T10:00:12.147580642Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22550-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nUpdate to version 10.0.11.\n\nSecurity issues fixed:\n\n- CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied\n  data in the virtio-gpu driver (bsc#1268061).\n- CVE-2026-48914: heap buffer overflow due to improper size validation in virtio-blk SCSI request handling\n  (bsc#1268794).\n- CVE-2026-48004: heap use-after-free race condition due to missing rename lock in v9fs_co_readdir_many (bsc#1270133).\n\nOther updates and bugfixes:\n\n- Version 10.0.11:\n  * Full backport list here: https://lore.kernel.org/qemu-devel/20260627082646.D825717AB67@think4mjt.localdomain/\n- Version 10.0.10:\n  * Full backport list here: https://lore.kernel.org/qemu-devel/20260528061820.CEE521691A9@think4mjt.localdomain/\n- ppc/spapr: Skip system reset for quiesced CPUs (bsc#1268279).\n- i386/tdx: handle TDG.VP.VMCALL \u003cGetQuote\u003e (jsc#PED-9266).\n- i386/tdx: handle TDG.VP.VMCALL \u003cGetTdVmCallInfo\u003e (jsc#PED-9266).\n- update Linux headers to v6.16-rc3 (jsc#PED-9266).\n- i386/cpu: Warn about why CPUID_EXT_PDCM is not available (jsc#PED-9266).\n- i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check (jsc#PED-9266).\n- [openSUSE] qemu-ga: fix service file against no-autostart (bsc#1199023).\n","status":"published","published":"2026-07-07T17:18:22Z","modified":"2026-07-14T18:24:37.505578208Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22576-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nUpdate to version 10.0.11.\n\nSecurity issues fixed:\n\n- CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied\n  data in the virtio-gpu driver (bsc#1268061).\n- CVE-2026-48914: heap buffer overflow due to improper size validation in virtio-blk SCSI request handling\n  (bsc#1268794).\n- CVE-2026-48004: heap use-after-free race condition due to missing rename lock in v9fs_co_readdir_many (bsc#1270133).\n\nOther updates and bugfixes:\n\n- Version 10.0.11:\n  * Full backport list here: https://lore.kernel.org/qemu-devel/20260627082646.D825717AB67@think4mjt.localdomain/\n- Version 10.0.10:\n  * Full backport list here: https://lore.kernel.org/qemu-devel/20260528061820.CEE521691A9@think4mjt.localdomain/\n- ppc/spapr: Skip system reset for quiesced CPUs (bsc#1268279).\n- i386/tdx: handle TDG.VP.VMCALL \u003cGetQuote\u003e (jsc#PED-9266).\n- i386/tdx: handle TDG.VP.VMCALL \u003cGetTdVmCallInfo\u003e (jsc#PED-9266).\n- update Linux headers to v6.16-rc3 (jsc#PED-9266).\n- i386/cpu: Warn about why CPUID_EXT_PDCM is not available (jsc#PED-9266).\n- i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check (jsc#PED-9266).\n- [openSUSE] qemu-ga: fix service file against no-autostart (bsc#1199023).\n","status":"published","published":"2026-07-07T17:18:22Z","modified":"2026-07-15T18:24:12.359676586Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:3038-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues\n\n- CVE-2026-3886: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability (bsc#1268061).\n- CVE-2026-48004: heap use-after-free race condition allows a DoS by an unprivileged guest user (bsc#1270133).\n- CVE-2026-48914: qemu-kvm: Heap Buffer Overflow in virtio-blk SCSI Request Handling (bsc#1268794).\n","status":"published","published":"2026-07-15T11:45:31Z","modified":"2026-07-16T10:00:07.931621104Z","updated_at":"2026-11-02T15:54:04.987808Z"}]}}