Summary
[10.1.0-16.el10_2.5]
- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389]
- Resolves: RHEL-207389
(qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z])
[10.1.0-16.el10_2.4]
- kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702]
- kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702]
- kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702]
- kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702]
- kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702]
- kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702]
- kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702]
- kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702]
- Resolves: RHEL-190702
(qemu-kvm hung during drain after double pause [rhel-10.2.z])
[10.1.0-16.el10_2.3]
- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529]
- Resolves: RHEL-184529
(CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z])
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | qemu-guest-agent | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-img | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-audio-pa | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-block-blkio | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-block-curl | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-block-rbd | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-common | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-core | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-device-display-virtio-gpu | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-device-display-virtio-gpu-pci | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-device-display-virtio-vga | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-device-usb-host | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-device-usb-redirect | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-docs | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-tools | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-ui-egl-headless | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-kvm-ui-opengl | 18:10.1.0-16.el10_2.5 |
| Oracle Linux · 10 | qemu-pr-helper | 18:10.1.0-16.el10_2.5 |
Vulnerabilities 1
-
Medium 6.7
Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed v…