Skip to content
OpenAdvisories
High ALAS2-2026-4027 1 CVE

Important: qemu security update (Amazon Linux 2)

Published Oct 26, 2026 · Updated Oct 26, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-93834: A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal restrictions and escaping the shared directory boundary. This can lead to arbitrary host file read/write and code execution (VM escape) as the QEMU process user. CVE-2026-84788: io/channel-socket: do not treat a zero length write as an error CVE-2026-77913: hw/display/vga: fix text-mode OOB write after a graphics surface switch CVE-2026-17588: hw/usb/hcd-xhci: Set reentrancy guard in timer functions CVE-2026-16271: hw/display/qxl: validate primary surface stride against width

Fixed packages 28

ReleasePackageFixed in
Amazon Linux · 2 ivshmem-tools 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-audio-alsa 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-audio-oss 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-audio-pa 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-audio-sdl 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-block-curl 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-block-dmg 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-block-iscsi 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-block-nfs 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-block-rbd 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-block-ssh 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-common 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-debuginfo 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-guest-agent 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-img 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-kvm 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-kvm-core 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-system-aarch64 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-system-aarch64-core 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-system-x86 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-system-x86-core 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-ui-curses 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-ui-gtk 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-ui-sdl 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-user 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-user-binfmt 10:3.1.0-8.amzn2.0.29
Amazon Linux · 2 qemu-user-static 10:3.1.0-8.amzn2.0.29

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-16271.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-17588.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-77913.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-84788.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-93834.html