# CVE-2026-48914: Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

CVE-2026-48914 is fixed in 25 products on 1 platform, first by RHSA-2026:58571, released May 26, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-48914
- Priority: Routine
- CVSS: 6.7 (Moderate)
- EPSS: 0.0016
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 26, 2026
- Weakness: Heap-based Buffer Overflow
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48914

## Description

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | qemu Debian 13.5 (trixie) | 1:10.0.11+ds-0+deb13u1 | [DEBIAN-CVE-2026-48914](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48914.md) | Jun 12, 2026 |
| Linux | qemu Debian 14 | 1:11.0.2+ds-1 | [DEBIAN-CVE-2026-48914](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48914.md) | Jun 12, 2026 |
| Linux | qemu opensuse-leap 16.0 | 10.0.11-160000.1.1 | [OPENSUSE-SU-2026:21253-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21253-1.md) | Jul 7, 2026 |
| Linux | qemu sles 15.7 | 9.2.4-150700.3.23.1 | [SUSE-SU-2026:3038-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3038-1.md) | Jul 15, 2026 |
| Linux | qemu sles 16.0 | 10.0.11-160000.1.1 | [SUSE-SU-2026:22576-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22576-1.md) | Jul 7, 2026 |
| Linux | qemu-guest-agent RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-guest-agent almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-guest-agent almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-guest-agent ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-guest-agent ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-img RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-img almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-img almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-img ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-img ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm RHEL 10 | 10.1.0-16.el10_2.5 | [RHSA-2026:58571](https://patchblox.com/security/data/fix/linux/rhsa-2026-58571.md) | May 26, 2026 |
| Linux | qemu-kvm RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm rocky 10 | 8:10.1.0-16.el10_2.5 | [RLSA-2026:58571](https://patchblox.com/security/data/fix/linux/rlsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm rocky 9 | 7:10.1.0-17.el9_8.4 | [RLSA-2026:39311](https://patchblox.com/security/data/fix/linux/rlsa-2026-39311.md) | Jul 15, 2026 |
| Linux | qemu-kvm-audio-pa RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-audio-pa almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-audio-pa almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-audio-pa ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-audio-pa ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-block-blkio RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-block-blkio almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-block-blkio almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-block-blkio ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-block-blkio ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-block-curl RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-block-curl almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-block-curl almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-block-curl ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-block-curl ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-block-iscsi ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-block-rbd RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-block-rbd almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-block-rbd almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-block-rbd ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-block-rbd ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-block-ssh ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-common RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-common almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-common almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-common ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-common ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-core RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-core almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-core almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-core ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-core ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-ccw RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-ccw almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-ccw almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-pci RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-pci almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-pci almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-pci ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-display-virtio-gpu-pci ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-display-virtio-vga RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-device-display-virtio-vga almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-display-virtio-vga almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-display-virtio-vga ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-display-virtio-vga ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-usb-host RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-device-usb-host almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-usb-host almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-usb-host ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-usb-host ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-usb-redirect RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-device-usb-redirect almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-usb-redirect almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-device-usb-redirect ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-device-usb-redirect ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-docs RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-docs almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-docs almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-docs ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-docs ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-tools RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-tools almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-tools almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-tools ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-tools ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-ui-egl-headless RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-ui-egl-headless almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-ui-egl-headless almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-ui-egl-headless ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-ui-egl-headless ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-ui-opengl RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-kvm-ui-opengl almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-ui-opengl almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-kvm-ui-opengl ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-kvm-ui-opengl ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-linux-user opensuse-leap 16.0 | 10.0.11-160000.1.1 | [OPENSUSE-SU-2026:21253-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21253-1.md) | Jul 7, 2026 |
| Linux | qemu-linux-user sles 15.7 | 9.2.4-150700.3.23.1 | [SUSE-SU-2026:3038-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3038-1.md) | Jul 15, 2026 |
| Linux | qemu-linux-user sles 16.0 | 10.0.11-160000.1.1 | [SUSE-SU-2026:22576-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22576-1.md) | Jul 7, 2026 |
| Linux | qemu-pr-helper RHEL 9 | 17:10.1.0-17.el9_8.4 | [RHSA-2026:39311](https://patchblox.com/security/data/fix/linux/rhsa-2026-39311.md) | Jul 18, 2026 |
| Linux | qemu-pr-helper almalinux 10 | 18:10.1.0-16.el10_2.5.alma.1 | [ALSA-2026:58571](https://patchblox.com/security/data/fix/linux/alsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-pr-helper almalinux 9 | 17:10.1.0-17.el9_8.4.alma.1 | [ALSA-2026:39311](https://patchblox.com/security/data/fix/linux/alsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-pr-helper ol 10 | 18:10.1.0-16.el10_2.5 | [ELSA-2026-58571](https://patchblox.com/security/data/fix/linux/elsa-2026-58571.md) | Aug 24, 2026 |
| Linux | qemu-pr-helper ol 9 | 17:10.1.0-17.el9_8.4 | [ELSA-2026-39311](https://patchblox.com/security/data/fix/linux/elsa-2026-39311.md) | Jul 14, 2026 |
| Linux | qemu-virtiofsd ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.