Red Hat Security Advisory

RHSA-2026:58571

qemu-kvm security, bug fix, and enhancement update

Released 2026-08-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) qemu-guest-agent-18:10.1.0-16.el10_2.5, qemu-img-18:10.1.0-16.el10_2.5, qemu-kvm-18:10.1.0-16.el10_2.5 +17

Fixes 1 record

TI-2026-36174 CVE-2026-48914 · GHSA-4hmh-vx7h-h98p

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

LOW 29

A flaw was found in QEMU's virtio-blk device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00158 Published 2026-06-12 Partial fix · 18:10.1.0-16.el10_2.5, 17:10.1.0-17.el9_8.4 CWE-122