{
  "cveId": "CVE-2026-3886",
  "url": "https://patchblox.com/security/cve/CVE-2026-3886",
  "summary": "CVE-2026-3886 is fixed in 2 products on 1 platform, first by SUSE-SU-2026:22576-1, released July 7, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "qemu: This update for qemu fixes the following issue:\n\n- CVE-2026-3886: QEMU calc_image_hostmem Integer Overflow Local Priv...",
  "description": "This update for qemu fixes the following issue:\n\n- CVE-2026-3886: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability (bsc#1268061).\n\nChanges for qemu:\n\n- Bug fixes:\n  * target/s390x: Make container ids in SysIB_15x 1-based (bsc#1275490)\n  * target/s390x: move @deprecated-props to CpuModelExpansion Info (bsc#1273447)\n  * target/s390x: filter deprecated properties based on model expansion type (bsc#1273447)\n  * target/s390x: flag te and cte as deprecated (bsc#1273447)\n  * target/s390x: report deprecated-props in cpu-model-expansion reply (bcs#1273447)",
  "published": "2026-07-07T17:18:22Z",
  "severity": "",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "qemu",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:10.0.10\u002Bds-0\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-3886",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-3886",
      "released": "2026-07-09T15:45:02Z"
    },
    {
      "platform": "linux",
      "product": "qemu",
      "release": "Debian 14",
      "fixedVersion": "1:11.0.0\u002Bds-1",
      "fix": "DEBIAN-CVE-2026-3886",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-3886",
      "released": "2026-07-09T15:45:02Z"
    },
    {
      "platform": "linux",
      "product": "qemu",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "10.0.11-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21253-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21253-1",
      "released": "2026-07-07T17:20:48Z"
    },
    {
      "platform": "linux",
      "product": "qemu",
      "release": "sles 15.6",
      "fixedVersion": "8.2.10-150600.3.52.1",
      "fix": "SUSE-SU-2026:3806-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3806-1",
      "released": "2026-08-26T09:07:17Z"
    },
    {
      "platform": "linux",
      "product": "qemu",
      "release": "sles 15.7",
      "fixedVersion": "9.2.4-150700.3.23.1",
      "fix": "SUSE-SU-2026:3038-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3038-1",
      "released": "2026-07-15T11:45:31Z"
    },
    {
      "platform": "linux",
      "product": "qemu",
      "release": "sles 16.0",
      "fixedVersion": "10.0.11-160000.1.1",
      "fix": "SUSE-SU-2026:22576-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22576-1",
      "released": "2026-07-07T17:18:22Z"
    },
    {
      "platform": "linux",
      "product": "qemu-linux-user",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "10.0.11-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21253-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21253-1",
      "released": "2026-07-07T17:20:48Z"
    },
    {
      "platform": "linux",
      "product": "qemu-linux-user",
      "release": "sles 15.7",
      "fixedVersion": "9.2.4-150700.3.23.1",
      "fix": "SUSE-SU-2026:3038-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3038-1",
      "released": "2026-07-15T11:45:31Z"
    },
    {
      "platform": "linux",
      "product": "qemu-linux-user",
      "release": "sles 16.0",
      "fixedVersion": "10.0.11-160000.1.1",
      "fix": "SUSE-SU-2026:22576-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22576-1",
      "released": "2026-07-07T17:18:22Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}