https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:36:21.276776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:9136 ALSA-2024:9136 — Moderate: qemu-kvm security update 2026-10-03T20:36:21.430659+00:00

Affected: AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-blkio, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu and 10 more

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow (CVE-2024-26327) * QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446) * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-01712 bdu:2024-01712 2026-10-03T20:36:21.430828+00:00 bdu:2024-01712 https://cve.radiocsirt.org/vuln/bell-cve-2024-26327 BELL-CVE-2024-26327 2026-10-03T20:36:21.430854+00:00

Affected: Alpaquita:23: qemu, Alpaquita:stream: qemu

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-03T20:36:21.430886+00:00 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/euvd-2026-4299 EUVD-2026-4299 2026-10-03T20:36:21.430913+00:00 EUVD-2026-4299 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26327 fkie_cve-2024-26327 2026-10-03T20:36:21.430937+00:00

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

 https://cve.radiocsirt.org/vuln/ghsa-7m48-vw34-vw84 GHSA-7m48-vw34-vw84 2026-10-03T20:36:21.430977+00:00

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

 https://cve.radiocsirt.org/vuln/gsd-2024-26327 gsd-2024-26327 2026-10-03T20:36:21.431003+00:00 gsd-2024-26327 https://cve.radiocsirt.org/vuln/msrc_cve-2024-26327 msrc_CVE-2024-26327 — An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where… 2026-10-03T20:36:21.431020+00:00 msrc_CVE-2024-26327 https://cve.radiocsirt.org/vuln/rhsa-2024:9136 RHSA-2024:9136 — Red Hat Security Advisory: qemu-kvm security update 2026-10-03T20:36:21.431049+00:00

QEMU: virtio: DMA reentrancy issue leads to double free vulnerability QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure qemu-kvm: pcie: improper validation of NumVFs leads to buffer overflow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-26327 UBUNTU-CVE-2024-26327 2026-10-03T20:36:21.431083+00:00

Affected: Ubuntu:24.04:LTS: qemu

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0412 WID-SEC-W-2024-0412 — QEMU: Mehrere Schwachstellen ermöglichen nicht spezifizierte Angriffe 2026-10-03T20:36:21.431114+00:00

Ein Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.