# CVE-2025-8860: qemu: A flaw was found in QEMU in the uefi-vars virtual device

CVE-2025-8860 is fixed in 122 products on 1 platform, first by DEBIAN-CVE-2025-8860, released February 18, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2025-8860
- Priority: Routine
- CVSS: 3.3 (low)
- EPSS: 0.0017
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 18, 2026

## Description

A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VARS_REG_BUFFER_SIZE, the .write callback `uefi_vars_write` is invoked. The function allocates a heap buffer without zeroing the memory, leaving the buffer filled with residual data from prior allocations. When the guest later reads from register UEFI_VARS_REG_PIO_BUFFER_TRANSFER, the .read callback `uefi_vars_read` returns leftover metadata or other sensitive process memory from the previously allocated buffer, leading to an information disclosure vulnerability.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | hivex-devel ol 8 | 0:1.3.18-23.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-appliance ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-bash-completion ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-devel ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-gfs2 ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-gobject ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-gobject-devel ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-inspect-icons ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-java ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-java-devel ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-javadoc ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-man-pages-ja ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-man-pages-uk ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-rescue ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-rsync ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-tools ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-tools-c ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-winsupport ol 8 | 0:8.10-1.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libguestfs-xfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libiscsi ol 8 | 0:1.18.0-8.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libiscsi-devel ol 8 | 0:1.18.0-8.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libiscsi-utils ol 8 | 0:1.18.0-8.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libnbd ol 8 | 0:1.6.0-6.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libnbd-bash-completion ol 8 | 0:1.6.0-6.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libnbd-devel ol 8 | 0:1.6.0-6.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libtpms ol 8 | 0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libtpms-devel ol 8 | 0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-client ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-client-qemu ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-config-network ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-config-nwfilter ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-interface ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-network ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-nodedev ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-nwfilter ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-qemu ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-secret ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-core ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-disk ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-gluster ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-iscsi ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-iscsi-direct ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-logical ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-mpath ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-rbd ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-driver-storage-scsi ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-daemon-kvm ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-dbus ol 8 | 0:1.3.0-2.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-devel ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-docs ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-libs ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-lock-sanlock ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-nss ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | libvirt-wireshark ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | lua-guestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdfuse ol 8 | 0:1.6.0-6.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-bash-completion ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-basic-filters ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-basic-plugins ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-curl-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-devel ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-example-plugins ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-gzip-filter ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-gzip-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-linuxdisk-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-nbd-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-python-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-server ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-ssh-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-tar-filter ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-tar-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-tmpdisk-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-vddk-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | nbdkit-xz-filter ol 8 | 0:1.24.0-5.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | netcf ol 8 | 0:0.2.8-12.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | netcf-devel ol 8 | 0:0.2.8-12.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | netcf-libs ol 8 | 0:0.2.8-12.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | perl-Sys-Guestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | perl-Sys-Virt ol 8 | 0:8.0.0-1.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | perl-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | python3-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | python3-libguestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | python3-libnbd ol 8 | 0:1.6.0-6.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | python3-libvirt ol 8 | 0:9.0.0-16.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu Debian 13.5 (trixie) | 1:10.0.3+ds-4 | [DEBIAN-CVE-2025-8860](https://patchblox.com/security/data/fix/linux/debian-cve-2025-8860.md) | Feb 18, 2026 |
| Linux | qemu Debian 14 | 1:10.0.3+ds-4 | [DEBIAN-CVE-2025-8860](https://patchblox.com/security/data/fix/linux/debian-cve-2025-8860.md) | Feb 18, 2026 |
| Linux | qemu-guest-agent ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-guest-agent ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-img ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-img ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-curl ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-curl ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-gluster ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-iscsi ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-iscsi ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-rbd ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-rbd ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-ssh ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-block-ssh ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm-common ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-common ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm-core ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-core ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-kvm-device-usb-host ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-kvm-device-usb-host ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | qemu-virtiofsd ol 8 | 15:7.2.0-37.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | qemu-virtiofsd ol 9 | 31:7.2.0-37.el9 | [ELSA-2026-50241](https://patchblox.com/security/data/fix/linux/elsa-2026-50241.md) | Apr 24, 2026 |
| Linux | ruby-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | ruby-libguestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | seabios ol 8 | 0:1.16.0-4.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | seabios-bin ol 8 | 0:1.16.0-4.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | seavgabios-bin ol 8 | 0:1.16.0-4.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | sgabios ol 8 | 1:0.20170427git-3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | sgabios-bin ol 8 | 1:0.20170427git-3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | supermin ol 8 | 0:5.2.1-2.0.1.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | supermin-devel ol 8 | 0:5.2.1-2.0.1.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | swtpm ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | swtpm-devel ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | swtpm-libs ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | swtpm-tools ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | swtpm-tools-pkcs11 ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | virt-dib ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | virt-v2v ol 8 | 1:1.42.0-22.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | virt-v2v-bash-completion ol 8 | 1:1.42.0-22.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | virt-v2v-man-pages-ja ol 8 | 1:1.42.0-22.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |
| Linux | virt-v2v-man-pages-uk ol 8 | 1:1.42.0-22.module+el8.10.0+90872+a1d63504 | [ELSA-2026-50239](https://patchblox.com/security/data/fix/linux/elsa-2026-50239.md) | Apr 24, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.