https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T07:24:43.813820+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-48914 CVE-2026-48914 — Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling 2026-09-29T07:24:43.867458+00:00

Affected: qemu, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux for NVIDIA 26, Red Hat OpenShift Container Platform 4

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.