Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
QEMU 10.1.0-1 can crash when loading from NFS
published 1 month ago
Summary
The QEMU version 10.1.0-1 used with Azure can be forced to stop working if it receives a specially crafted response from an NFS file server during boot. An attacker controlling the NFS server could cause the boot process to fail or corrupt data. Update QEMU to a version that includes the fix or avoid using untrusted NFS servers during startup.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | qemu | <= 10.1.0-1 |
Original advisory text
CVE-2026-74220 affecting package qemu 10.1.0-1
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the destination buffer, crashing the bootloader or corrupting memory.
References
Timeline
Published29 Sep 2026
Updated3 Oct 2026
First seen3 Oct 2026
Sources
AZL-105699 · OSV
Track software like this
Free during beta