All errata/p11/ALT-PU-2026-2493-2
ALT-PU-2026-2493-2

Package update pve-qemu in branch p11

Version10.1.2-alt2
Published2026-02-19
Max severityMEDIUM
Severity:

Closed issues (7)

BDU:2024-08773
MEDIUM5.5

Уязвимость функции usb_ep_get() (hw/net/core.c) эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2024-10-30Modified: 2026-03-02
CVSS 3.xMEDIUM 5.5
CVSS:3.x/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:S/C:N/I:N/A:C
References
BDU:2025-11540
MEDIUM4.2

Уязвимость компонента hw/pci/pcie_sriov.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю выполнить произвольный код

Published: 2025-09-24
CVSS 3.xMEDIUM 4.2
CVSS:3.x/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS 2.0LOW 3.2
CVSS:2.0/AV:A/AC:H/Au:N/C:N/I:P/A:P
References
BDU:2025-13491
MEDIUM4.2

Уязвимость компонента hw/pci/pcie_sriov.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю выполнить произвольный код

Published: 2025-10-28
CVSS 3.xMEDIUM 4.2
CVSS:3.x/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS 2.0LOW 3.2
CVSS:2.0/AV:A/AC:H/Au:N/C:N/I:P/A:P
References
CVE-2024-8354
MEDIUM5.5

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.

Published: 2024-09-19Modified: 2024-11-21
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE-2025-8860
LOW3.3

A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VARS_REG_BUFFER_SIZE, the .write callback `uefi_vars_write` is invoked. The function allocates a heap buffer without zeroing the memory, leaving the buffer filled with residual data from prior allocations. When the guest later reads from register UEFI_VARS_REG_PIO_BUFFER_TRANSFER, the .read callback `uefi_vars_read` returns leftover metadata or other sensitive process memory from the previously allocated buffer, leading to an information disclosure vulnerability.

Published: 2026-02-18Modified: 2026-04-15
CVSS 3.xLOW 3.3
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Closed bugs (1)

qmp command 'object-add' failed - invalid object type: dbus-vmstate