https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:18:22.324143+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0886 ALSA-2022:0886 — Moderate: virt:rhel and virt-devel:rhel security update 2026-10-03T01:18:22.367443+00:00

Affected: AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: libvirt-dbus, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: qemu-guest-agent, AlmaLinux:8: qemu-img, AlmaLinux:8: qemu-kvm and 9 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 (CVE-2022-0358)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-01465 bdu:2022-01465 2026-10-03T01:18:22.367548+00:00 bdu:2022-01465 https://cve.radiocsirt.org/vuln/cnvd-2022-84163 cnvd-2022-84163 2026-10-03T01:18:22.367566+00:00 cnvd-2022-84163 https://cve.radiocsirt.org/vuln/euvd-2026-10953 EUVD-2026-10953 2026-10-03T01:18:22.367579+00:00 EUVD-2026-10953 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0358 fkie_cve-2022-0358 2026-10-03T01:18:22.367598+00:00

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

 https://cve.radiocsirt.org/vuln/ghsa-mv2v-9q68-4c8h GHSA-mv2v-9q68-4c8h 2026-10-03T01:18:22.367625+00:00

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

 https://cve.radiocsirt.org/vuln/gsd-2022-0358 gsd-2022-0358 2026-10-03T01:18:22.367643+00:00 gsd-2022-0358 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0358 msrc_CVE-2022-0358 — A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly rela… 2026-10-03T01:18:22.367654+00:00 msrc_CVE-2022-0358 https://cve.radiocsirt.org/vuln/oesa-2022-1772 OESA-2022-1772 — qemu security update 2026-10-03T01:18:22.367674+00:00

Affected: openEuler:22.03-LTS: qemu

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.(CVE-2021-4158)

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This issue allows a malicious user to trigger CVE-2018-13405 to obtain sensitive information or potentially escalate their privileges on the system.(CVE-2022-0358)

 https://cve.radiocsirt.org/vuln/rhsa-2022:0759 RHSA-2022:0759 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update 2026-10-03T01:18:22.367699+00:00

QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0358 UBUNTU-CVE-2022-0358 2026-10-03T01:18:22.367716+00:00

Affected: Ubuntu:22.04:LTS: qemu

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0421 WID-SEC-W-2022-0421 — QEMU: Schwachstelle ermöglicht Privilegieneskalation 2026-10-03T01:18:22.367737+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um seine Privilegien zu erhöhen und vertrauliche Informationen offenzulegen.