https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:38:47 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:1831 <p><strong>Affected:</strong> AlmaLinux:10: qemu-guest-agent, AlmaLinux:10: qemu-img, AlmaLinux:10: qemu-kvm, AlmaLinux:10: qemu-kvm-audio-pa, AlmaLinux:10: qemu-kvm-block-blkio, AlmaLinux:10: qemu-kvm-block-curl, AlmaLinux:10: qemu-kvm-block-rbd, AlmaLinux:10: qemu-kvm-common, AlmaLinux:10: qemu-kvm-core, AlmaLinux:10: qemu-kvm-device-display-virtio-gpu and 10 more</p> <p>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.</p> <p>Security Fix(es):</p> <p>* qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: qemu-guest-agent, AlmaLinux:10: qemu-img, AlmaLinux:10: qemu-kvm, AlmaLinux:10: qemu-kvm-audio-pa, AlmaLinux:10: qemu-kvm-block-blkio, AlmaLinux:10: qemu-kvm-block-curl, AlmaLinux:10: qemu-kvm-block-rbd, AlmaLinux:10: qemu-kvm-common, AlmaLinux:10: qemu-kvm-core, AlmaLinux:10: qemu-kvm-device-display-virtio-gpu and 10 more</p> <p>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.</p> <p>Security Fix(es):</p> <p>* qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:1831 https://cve.radiocsirt.org/vuln/bdu:2025-16063 bdu:2025-16063 https://cve.radiocsirt.org/vuln/bdu:2025-16063 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0899 certfr-2025-avi-0899 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0899 https://cve.radiocsirt.org/vuln/euvd-2026-372741 EUVD-2026-372741 https://cve.radiocsirt.org/vuln/euvd-2026-372741 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11234 <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.</p> <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11234 https://cve.radiocsirt.org/vuln/ghsa-hm8v-8c3v-cxfq <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.</p> <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-hm8v-8c3v-cxfq https://cve.radiocsirt.org/vuln/msrc_cve-2025-11234 msrc_CVE-2025-11234 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11234 https://cve.radiocsirt.org/vuln/oesa-2026-1263 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es):</p> <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.(CVE-2025-11234)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es):</p> <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.(CVE-2025-11234)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1263 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15821-1 <p>qemu-10.1.3-1.1 on GA media</p> <p>qemu-10.1.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15821-1 https://cve.radiocsirt.org/vuln/rhsa-2025:23228 <p>qemu-kvm: VNC WebSocket handshake use-after-free</p> <p>qemu-kvm: VNC WebSocket handshake use-after-free</p> https://cve.radiocsirt.org/vuln/rhsa-2025:23228 https://cve.radiocsirt.org/vuln/suse-su-2025:21230-1 <p>Security update for qemu</p> <p>Security update for qemu</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21230-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11234 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu, Ubuntu:25.10: qemu</p> <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu, Ubuntu:25.10: qemu</p> <p>A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11234 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2193 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2193