Linux · Security advisory · May 27, 2026

RHSA-2026:18772: Security update for 20 packages

RHSA-2026:18772, released May 27, 2026, fixes 1 CVE across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0086
58th percentile

Fixed package versions

ProductReleaseFixed in
qemu-guest-agentRHEL 917:10.1.0-17.el9_8
qemu-imgRHEL 917:10.1.0-17.el9_8
qemu-kvmRHEL 917:10.1.0-17.el9_8
qemu-kvm-audio-paRHEL 917:10.1.0-17.el9_8
qemu-kvm-block-blkioRHEL 917:10.1.0-17.el9_8
qemu-kvm-block-curlRHEL 917:10.1.0-17.el9_8
qemu-kvm-block-rbdRHEL 917:10.1.0-17.el9_8
qemu-kvm-commonRHEL 917:10.1.0-17.el9_8
qemu-kvm-coreRHEL 917:10.1.0-17.el9_8
qemu-kvm-device-display-virtio-gpuRHEL 917:10.1.0-17.el9_8
qemu-kvm-device-display-virtio-gpu-ccwRHEL 917:10.1.0-17.el9_8
qemu-kvm-device-display-virtio-gpu-pciRHEL 917:10.1.0-17.el9_8
qemu-kvm-device-display-virtio-vgaRHEL 917:10.1.0-17.el9_8
qemu-kvm-device-usb-hostRHEL 917:10.1.0-17.el9_8
qemu-kvm-device-usb-redirectRHEL 917:10.1.0-17.el9_8
qemu-kvm-docsRHEL 917:10.1.0-17.el9_8
qemu-kvm-toolsRHEL 917:10.1.0-17.el9_8
qemu-kvm-ui-egl-headlessRHEL 917:10.1.0-17.el9_8
qemu-kvm-ui-openglRHEL 917:10.1.0-17.el9_8
qemu-pr-helperRHEL 917:10.1.0-17.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-11234 Qemu-kvm: vnc websocket handshake use-after-free 7.5 0.0086 None reported
Showing 1 to 1 of 1 1