Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
qemu Security Update Fixes Multiple Critical Issues
published 5 months ago
Summary
This update fixes several security issues in qemu, a popular virtual machine software. The issues could allow attackers to crash the system, steal sensitive information, or take control of the system. It's recommended to apply the update as soon as possible to ensure the security and stability of your virtual machines.
Original advisory text
Security update for qemu
This update for qemu fixes the following issues
- CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400).
- CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption (bsc#1256484).
- CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing
specially crafted VMDK files (bsc#1258509).
- CVE-2026-3195: heap buffer overflow when reading input audio in the virtio-snd device input callback due to
insufficient checks in `virtio_snd_pcm_in_cb` (bsc#1259080).
- CVE-2026-3196: integer overflow in the virtio-snd device via PCM_INFO requests from the guest leads to unbounded
memory allocation and host denial-of-service (bsc#1259079).
- CVE-2026-3842: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host OOB write
(bsc#1262089).
- CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400).
- CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption (bsc#1256484).
- CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing
specially crafted VMDK files (bsc#1258509).
- CVE-2026-3195: heap buffer overflow when reading input audio in the virtio-snd device input callback due to
insufficient checks in `virtio_snd_pcm_in_cb` (bsc#1259080).
- CVE-2026-3196: integer overflow in the virtio-snd device via PCM_INFO requests from the guest leads to unbounded
memory allocation and host denial-of-service (bsc#1259079).
- CVE-2026-3842: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host OOB write
(bsc#1262089).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202621883-1/ Vendor Advisory
- https://bugzilla.suse.com/1255400 Third Party Advisory
- https://bugzilla.suse.com/1256484 Third Party Advisory
- https://bugzilla.suse.com/1258509 Third Party Advisory
- https://bugzilla.suse.com/1259079 Third Party Advisory
- https://bugzilla.suse.com/1259080 Third Party Advisory
- https://bugzilla.suse.com/1262089 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2025-14876 URL
- https://www.suse.com/security/cve/CVE-2026-0665 URL
- https://www.suse.com/security/cve/CVE-2026-2243 URL
- https://www.suse.com/security/cve/CVE-2026-3195 URL
- https://www.suse.com/security/cve/CVE-2026-3196 URL
- https://www.suse.com/security/cve/CVE-2026-3842 URL
Timeline
Published1 Jun 2026
Updated3 Jun 2026
First seen3 Jun 2026
Sources
SUSE-SU-2026:21883-1 · OSV
Track software like this
Free during beta