Linux · Security advisory · April 24, 2026

ELSA-2026-50239: Security update for 121 packages

ELSA-2026-50239, released April 24, 2026, fixes 6 CVEs across 121 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0029
21st percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 0 Routine 6

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-23.module+el8.10.0+90872+a1d63504
hivex-develol 80:1.3.18-23.module+el8.10.0+90872+a1d63504
libguestfsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-applianceol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-bash-completionol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-develol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-gfs2ol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-gobjectol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-gobject-develol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-inspect-iconsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-javaol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-java-develol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-javadocol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-man-pages-jaol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-man-pages-ukol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-rescueol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-rsyncol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-toolsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-tools-col 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libguestfs-winsupportol 80:8.10-1.module+el8.10.0+90872+a1d63504
libguestfs-xfsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
libiscsiol 80:1.18.0-8.module+el8.10.0+90872+a1d63504
libiscsi-develol 80:1.18.0-8.module+el8.10.0+90872+a1d63504
libiscsi-utilsol 80:1.18.0-8.module+el8.10.0+90872+a1d63504
libnbdol 80:1.6.0-6.module+el8.10.0+90872+a1d63504
libnbd-bash-completionol 80:1.6.0-6.module+el8.10.0+90872+a1d63504
libnbd-develol 80:1.6.0-6.module+el8.10.0+90872+a1d63504
libtpmsol 80:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+90872+a1d63504
libtpms-develol 80:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+90872+a1d63504
libvirtol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-clientol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-client-qemuol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemonol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-config-networkol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-config-nwfilterol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-interfaceol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-networkol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-nodedevol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-nwfilterol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-qemuol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-secretol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storageol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-coreol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-diskol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-glusterol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-iscsiol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-iscsi-directol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-logicalol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-mpathol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-rbdol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-driver-storage-scsiol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-daemon-kvmol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-dbusol 80:1.3.0-2.module+el8.10.0+90872+a1d63504
libvirt-develol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-docsol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-libsol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-lock-sanlockol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-nssol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
libvirt-wiresharkol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
lua-guestfsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
nbdfuseol 80:1.6.0-6.module+el8.10.0+90872+a1d63504
nbdkitol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-bash-completionol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-basic-filtersol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-basic-pluginsol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-curl-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-develol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-example-pluginsol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-gzip-filterol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-gzip-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-linuxdisk-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-nbd-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-python-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-serverol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-ssh-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-tar-filterol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-tar-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-tmpdisk-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-vddk-pluginol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
nbdkit-xz-filterol 80:1.24.0-5.module+el8.10.0+90872+a1d63504
netcfol 80:0.2.8-12.module+el8.10.0+90872+a1d63504
netcf-develol 80:0.2.8-12.module+el8.10.0+90872+a1d63504
netcf-libsol 80:0.2.8-12.module+el8.10.0+90872+a1d63504
perl-Sys-Guestfsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
perl-Sys-Virtol 80:8.0.0-1.module+el8.10.0+90872+a1d63504
perl-hivexol 80:1.3.18-23.module+el8.10.0+90872+a1d63504
python3-hivexol 80:1.3.18-23.module+el8.10.0+90872+a1d63504
python3-libguestfsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
python3-libnbdol 80:1.6.0-6.module+el8.10.0+90872+a1d63504
python3-libvirtol 80:9.0.0-16.module+el8.10.0+90872+a1d63504
qemu-guest-agentol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-imgol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvmol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-block-curlol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-block-glusterol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-block-iscsiol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-block-rbdol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-block-sshol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-commonol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-coreol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-kvm-device-usb-hostol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
qemu-virtiofsdol 815:7.2.0-37.module+el8.10.0+90872+a1d63504
ruby-hivexol 80:1.3.18-23.module+el8.10.0+90872+a1d63504
ruby-libguestfsol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
seabiosol 80:1.16.0-4.module+el8.10.0+90872+a1d63504
seabios-binol 80:1.16.0-4.module+el8.10.0+90872+a1d63504
seavgabios-binol 80:1.16.0-4.module+el8.10.0+90872+a1d63504
sgabiosol 81:0.20170427git-3.module+el8.10.0+90872+a1d63504
sgabios-binol 81:0.20170427git-3.module+el8.10.0+90872+a1d63504
superminol 80:5.2.1-2.0.1.module+el8.10.0+90872+a1d63504
supermin-develol 80:5.2.1-2.0.1.module+el8.10.0+90872+a1d63504
swtpmol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504
swtpm-develol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504
swtpm-libsol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504
swtpm-toolsol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504
swtpm-tools-pkcs11ol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90872+a1d63504
virt-dibol 81:1.44.0-9.0.3.module+el8.10.0+90872+a1d63504
virt-v2vol 81:1.42.0-22.module+el8.10.0+90872+a1d63504
virt-v2v-bash-completionol 81:1.42.0-22.module+el8.10.0+90872+a1d63504
virt-v2v-man-pages-jaol 81:1.42.0-22.module+el8.10.0+90872+a1d63504
virt-v2v-man-pages-ukol 81:1.42.0-22.module+el8.10.0+90872+a1d63504

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2025-54566 hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327. 5.4 0.0029 None reported
Routine CVE-2025-54567 hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327. 5.4 0.0029 None reported
Routine CVE-2026-0665 qemu: An off-by-one error was found in QEMU's KVM Xen guest support 6.5 0.0017 None reported
Routine CVE-2025-8860 qemu: A flaw was found in QEMU in the uefi-vars virtual device 3.3 0.0017 None reported
Routine CVE-2025-14876 qemu: This update for qemu fixes the following issue: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (b... 5.5 0.0016 None reported
Routine CVE-2026-2243 Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing 5.1 0.0013 None reported
Showing 1 to 6 of 6 1