https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:21:32.733406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2135 ALSA-2024:2135 — Moderate: qemu-kvm security update 2026-10-03T10:21:32.876546+00:00

Affected: AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-blkio, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu and 10 more

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() (CVE-2023-3019) * QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service (CVE-2023-3255) * QEMU: improper IDE controller reset can lead to MBR overwrite (CVE-2023-5088) * QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() (CVE-2023-6683) * QEMU: am53c974: denial of service due to division by zero (CVE-2023-42467)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-05459 bdu:2023-05459 2026-10-03T10:21:32.876636+00:00 bdu:2023-05459 https://cve.radiocsirt.org/vuln/bell-cve-2023-42467 BELL-CVE-2023-42467 2026-10-03T10:21:32.876654+00:00

Affected: Alpaquita:23: qemu, Alpaquita:stream: qemu

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0619 certfr-2024-avi-0619 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-03T10:21:32.876674+00:00 certfr-2024-avi-0619 https://cve.radiocsirt.org/vuln/euvd-2026-188931 EUVD-2026-188931 2026-10-03T10:21:32.876691+00:00 EUVD-2026-188931 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42467 fkie_cve-2023-42467 2026-10-03T10:21:32.876702+00:00

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.

 https://cve.radiocsirt.org/vuln/ghsa-q76v-8f8c-4c2j GHSA-q76v-8f8c-4c2j 2026-10-03T10:21:32.876724+00:00

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.

 https://cve.radiocsirt.org/vuln/gsd-2023-42467 gsd-2023-42467 2026-10-03T10:21:32.876739+00:00 gsd-2023-42467 https://cve.radiocsirt.org/vuln/msrc_cve-2023-42467 msrc_CVE-2023-42467 — QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate… 2026-10-03T10:21:32.876750+00:00 msrc_CVE-2023-42467 https://cve.radiocsirt.org/vuln/rhsa-2024:2135 RHSA-2024:2135 — Red Hat Security Advisory: qemu-kvm security update 2026-10-03T10:21:32.876766+00:00

QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service QEMU: improper IDE controller reset can lead to MBR overwrite QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() QEMU: am53c974: denial of service due to division by zero

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2302 WID-SEC-W-2023-2302 — QEMU: Schwachstelle ermöglicht Denial of Service 2026-10-03T10:21:32.876790+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.