Skip to content
OpenAdvisories
Medium ELSA-2026-58571 1 CVE

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 10)

Published Aug 24, 2026 · Updated Aug 24, 2026

Summary

[10.1.0-16.el10_2.5]
- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389]
- Resolves: RHEL-207389
(qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z])

[10.1.0-16.el10_2.4]
- kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702]
- kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702]
- kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702]
- kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702]
- kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702]
- kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702]
- kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702]
- kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702]
- Resolves: RHEL-190702
(qemu-kvm hung during drain after double pause [rhel-10.2.z])

[10.1.0-16.el10_2.3]
- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529]
- Resolves: RHEL-184529
(CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z])

Fixed packages 19

ReleasePackageFixed in
Oracle Linux · 10 qemu-guest-agent 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-img 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-audio-pa 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-block-blkio 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-block-curl 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-block-rbd 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-common 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-core 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-device-display-virtio-gpu 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-device-display-virtio-gpu-pci 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-device-display-virtio-vga 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-device-usb-host 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-device-usb-redirect 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-docs 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-tools 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-ui-egl-headless 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-kvm-ui-opengl 18:10.1.0-16.el10_2.5
Oracle Linux · 10 qemu-pr-helper 18:10.1.0-16.el10_2.5

Vulnerabilities 1