<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 17:09:55 +0000</lastBuildDate>
    <item>
      <title>ALSA-2021:0711 — Important: virt:rhel and virt-devel:rhel security update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2021:0711</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs-winsupport, AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: libnbd, AlmaLinux:8: libnbd-devel, AlmaLinux:8: libvirt, AlmaLinux:8: libvirt-admin and 61 more&lt;/p&gt;
&lt;p&gt;Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* QEMU: virtiofsd: potential privileged host device access from guest (CVE-2020-35517)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs-winsupport, AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: libnbd, AlmaLinux:8: libnbd-devel, AlmaLinux:8: libvirt, AlmaLinux:8: libvirt-admin and 61 more&lt;/p&gt;
&lt;p&gt;Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* QEMU: virtiofsd: potential privileged host device access from guest (CVE-2020-35517)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2021:0711</guid>
    </item>
    <item>
      <title>bdu:2022-05685</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2022-05685</link>
      <description>bdu:2022-05685</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2022-05685</guid>
    </item>
    <item>
      <title>Withdrawn: BELL-CVE-2020-35517 — CVE-2020-35517 does not affect BellSoft software</title>
      <link>https://cve.radiocsirt.org/vuln/bell-cve-2020-35517</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bell-cve-2020-35517</guid>
    </item>
    <item>
      <title>cnvd-2021-09495</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2021-09495</link>
      <description>cnvd-2021-09495</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2021-09495</guid>
    </item>
    <item>
      <title>EUVD-2026-47625</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-47625</link>
      <description>EUVD-2026-47625</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-47625</guid>
    </item>
    <item>
      <title>fkie_cve-2020-35517</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2020-35517</link>
      <description>&lt;p&gt;A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2020-35517</guid>
    </item>
    <item>
      <title>GHSA-jgxm-7vmw-79h7</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-jgxm-7vmw-79h7</link>
      <description>&lt;p&gt;A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-jgxm-7vmw-79h7</guid>
    </item>
    <item>
      <title>gsd-2020-35517</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2020-35517</link>
      <description>gsd-2020-35517</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2020-35517</guid>
    </item>
    <item>
      <title>RHBA-2021:0639 — Red Hat Bug Fix Advisory: virt:8.3 bug fix and enhancement update</title>
      <link>https://cve.radiocsirt.org/vuln/rhba-2021:0639</link>
      <description>&lt;p&gt;QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c QEMU: net: an assert failure via eth_get_gso_type QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c QEMU: ide: atapi: OOB access while processing read commands QEMU: virtiofsd: potential privileged host device access from guest&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c QEMU: net: an assert failure via eth_get_gso_type QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c QEMU: ide: atapi: OOB access while processing read commands QEMU: virtiofsd: potential privileged host device access from guest&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhba-2021:0639</guid>
    </item>
  </channel>
</rss>
