https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:11:52.588397+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2135 ALSA-2024:2135 — Moderate: qemu-kvm security update 2026-10-03T17:11:52.819954+00:00

Affected: AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-blkio, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu and 10 more

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() (CVE-2023-3019) * QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service (CVE-2023-3255) * QEMU: improper IDE controller reset can lead to MBR overwrite (CVE-2023-5088) * QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() (CVE-2023-6683) * QEMU: am53c974: denial of service due to division by zero (CVE-2023-42467)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-07853 bdu:2023-07853 2026-10-03T17:11:52.820046+00:00 bdu:2023-07853 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0619 certfr-2024-avi-0619 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-03T17:11:52.820063+00:00 certfr-2024-avi-0619 https://cve.radiocsirt.org/vuln/essa-2024:0485 ESSA-2024:0485 — security update for virt:rhel 2026-10-03T17:11:52.820079+00:00

security update for virt:rhel

 https://cve.radiocsirt.org/vuln/euvd-2026-270677 EUVD-2026-270677 2026-10-03T17:11:52.820101+00:00 EUVD-2026-270677 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5088 fkie_cve-2023-5088 2026-10-03T17:11:52.820112+00:00

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

 https://cve.radiocsirt.org/vuln/ghsa-9627-hqj3-f64h GHSA-9627-hqj3-f64h 2026-10-03T17:11:52.820135+00:00

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

 https://cve.radiocsirt.org/vuln/gsd-2023-5088 gsd-2023-5088 2026-10-03T17:11:52.820151+00:00 gsd-2023-5088 https://cve.radiocsirt.org/vuln/msrc_cve-2023-5088 msrc_CVE-2023-5088 — Qemu: improper ide controller reset can lead to mbr overwrite 2026-10-03T17:11:52.820162+00:00 msrc_CVE-2023-5088 https://cve.radiocsirt.org/vuln/rhsa-2024:2962 RHSA-2024:2962 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and enhancement update 2026-10-03T17:11:52.820177+00:00

QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service QEMU: improper IDE controller reset can lead to MBR overwrite QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx()

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5088 UBUNTU-CVE-2023-5088 2026-10-03T17:11:52.820199+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2799 WID-SEC-W-2023-2799 — QEMU: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T17:11:52.820226+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um Sicherheitsvorkehrungen zu umgehen.