QEMU (qemu-kvm: virtio-snd): Mehrere Schwachstellen ermöglichen Codeausführung und DoS

Summary

Product

Vulnerabilities 2

• High 7.4
  CVE-2026-3195

  Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)

  A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due t…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Virtualization Debian Ubuntu Azure Linux
  Jun 19, 2026
• Medium 5.5
  CVE-2026-3196

  Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation

  An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condit…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Virtualization Debian Ubuntu Azure Linux
  Jun 19, 2026

Revision history

1. 2026-06-21 #8

   Referenz(en) aufgenommen: EUVD-2026-38042, EUVD-2026-38043

2. 2026-06-14 #7

   Neue Updates von SUSE aufgenommen

3. 2026-06-02 #6

   Neue Updates von SUSE aufgenommen

4. 2026-04-28 #5

   Neue Updates von SUSE aufgenommen

5. 2026-04-22 #4

   Neue Updates von SUSE aufgenommen

6. 2026-04-21 #3

   Neue Updates von openSUSE aufgenommen

7. 2026-04-12 #2

   Neue Updates von Ubuntu aufgenommen

8. 2026-03-02 #1

   Initiale Fassung

References

• Red Hat Bugtracker vom 2026-03-02
  https://bugzilla.redhat.com/show_bug.cgi?id=2443817
• Red Hat Bugtracker vom 2026-03-02
  https://bugzilla.redhat.com/show_bug.cgi?id=2443789
• Ubuntu Security Notice USN-8161-1 vom 2026-04-10
  https://ubuntu.com/security/notices/USN-8161-1
• openSUSE Security Update OPENSUSE-SU-2026:20567-1 vom 2026-04-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GIXQ6D7BVUI3JL6ZUXHFRN7NSCNRJWP/
• SUSE Security Update SUSE-SU-2026:21235-1 vom 2026-04-22
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025558.html
• SUSE Security Update SUSE-SU-2026:21354-1 vom 2026-04-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025749.html
• SUSE Security Update SUSE-SU-2026:21883-1 vom 2026-06-02
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026508.html
• SUSE Security Update SUSE-SU-2026:21912-1 vom 2026-06-02
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026482.html
• SUSE Security Update SUSE-SU-2026:2385-1 vom 2026-06-13
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026732.html
• SUSE Security Update SUSE-SU-2026:2386-1 vom 2026-06-13
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026739.html