{"id":"CVE-2026-5165","aliases":["EUVD-2026-17113","GHSA-6fw6-rqjg-9v3j"],"status":"published","title":"Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset","description":"A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00111,"percentile":0.01312,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-825"],"published":"2026-03-30T15:02:26Z","modified":"2026-11-05T21:17:53Z","products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"virtio-win"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-5165","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2453015","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/virtio-win/kvm-guest-drivers-windows/pull/1493","tags":["Issue Tracking"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5165"},{"url":"https://github.com/advisories/GHSA-6fw6-rqjg-9v3j"}],"sources":{"cve":[{"id":"CVE-2026-5165","title":"Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset","description":"A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.","status":"published","published":"2026-03-30T15:02:26.375Z","modified":"2026-11-05T21:17:53.958Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-825"],"updated_at":"2026-11-05T22:55:20.139479Z"}],"euvd":[{"id":"EUVD-2026-17113","description":"A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.","status":"published","published":"2026-03-30T15:02:26Z","modified":"2026-11-05T21:17:53Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-05T22:02:08.543452Z"}],"ghsa":[{"id":"GHSA-6fw6-rqjg-9v3j","title":"A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the...","description":"A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.","status":"published","published":"2026-03-30T15:32:07Z","modified":"2026-03-30T15:32:13Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-825"],"updated_at":"2026-11-02T15:06:55.220248Z"}],"nvd":[{"id":"CVE-2026-5165","description":"A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.","status":"published","published":"2026-03-30T15:16:36.52Z","modified":"2026-11-05T22:18:50.313Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-825"],"updated_at":"2026-11-05T23:57:17.922269Z"}]}}