Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061). - CVE-2026-48914: heap buffer overflow due to improper size validation in virtio-blk SCSI request handling (bsc#1268794). - CVE-2026-48004: heap use-after-free race condition due to missing rename lock in v9fs_co_readdir_many (bsc#1270133). Other updates and bugfixes: - Version 10.0.11: * Full backport list here: https://lore.kernel.org/qemu-devel/[email protected]/ - Version 10.0.10: * Full backport list here: https://lore.kernel.org/qemu-devel/[email protected]/ - ppc/spapr: Skip system reset for quiesced CPUs (bsc#1268279). - i386/tdx: handle TDG.VP.VMCALL <GetQuote> (jsc#PED-9266). - i386/tdx: handle TDG.VP.VMCALL <GetTdVmCallInfo> (jsc#PED-9266). - update Linux headers to v6.16-rc3 (jsc#PED-9266). - i386/cpu: Warn about why CPUID_EXT_PDCM is not available (jsc#PED-9266). - i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check (jsc#PED-9266). - [openSUSE] qemu-ga: fix service file against no-autostart (bsc#1199023).
Security update for qemu
Description
This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061). - CVE-2026-48914: heap buffer overflow due to improper size validation in virtio-blk SCSI request handling (bsc#1268794). - CVE-2026-48004: heap use-after-free race condition due to missing rename lock in v9fs_co_readdir_many (bsc#1270133). Other updates and bugfixes: - Version 10.0.11: * Full backport list here: https://lore.kernel.org/qemu-devel/[email protected]/ - Version 10.0.10: * Full backport list here: https://lore.kernel.org/qemu-devel/[email protected]/ - ppc/spapr: Skip system reset for quiesced CPUs (bsc#1268279). - i386/tdx: handle TDG.VP.VMCALL <GetQuote> (jsc#PED-9266). - i386/tdx: handle TDG.VP.VMCALL <GetTdVmCallInfo> (jsc#PED-9266). - update Linux headers to v6.16-rc3 (jsc#PED-9266). - i386/cpu: Warn about why CPUID_EXT_PDCM is not available (jsc#PED-9266). - i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check (jsc#PED-9266). - [openSUSE] qemu-ga: fix service file against no-autostart (bsc#1199023).
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:21253-1
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-48004","CVE-2026-48914"]
Threat ID: 6aab496f55bf5e2cf5990e00
Added to database: 09/17/2026, 01:59:11 UTC
Last updated: 09/17/2026, 01:59:11 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.