ELSA-2026-58571

ELSA-2026-58571 - qemu-kvm security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-24

Description

[10.1.0-16.el10_2.5]
- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389]
- Resolves: RHEL-207389
(qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z])

[10.1.0-16.el10_2.4]
- kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702]
- kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702]
- kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702]
- kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702]
- kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702]
- kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702]
- kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702]
- kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702]
- Resolves: RHEL-190702
(qemu-kvm hung during drain after double pause [rhel-10.2.z])

[10.1.0-16.el10_2.3]
- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529]
- Resolves: RHEL-184529
(CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z])

Related CVEs

CVE-2026-48914

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	qemu-kvm-10.1.0-16.el10_2.5.src.rpm	6a9cdca2a26d80a9d368426fc167eca29ad7a2845011971d79322bfa5afb15a7	-	ol10_aarch64_appstream
	qemu-guest-agent-10.1.0-16.el10_2.5.aarch64.rpm	c82d3841afc7d300b556157eebcd7bd244184246f71454f6de5baba90634f307	-	ol10_aarch64_appstream
	qemu-img-10.1.0-16.el10_2.5.aarch64.rpm	e3f4d17caa5953a88796d89205777b6dffe1229e7273837b99c2c77ba431c4e5	-	ol10_aarch64_appstream
	qemu-kvm-10.1.0-16.el10_2.5.aarch64.rpm	da32522780305d20891dd1cefd2232ff4f3c01a474b51535059f5359dc8d053e	-	ol10_aarch64_appstream
	qemu-kvm-audio-pa-10.1.0-16.el10_2.5.aarch64.rpm	e49e2b3af2fb4fba3cd0d681e93dcfaf755f3fac49713be414ef0710e0698937	-	ol10_aarch64_appstream
	qemu-kvm-block-blkio-10.1.0-16.el10_2.5.aarch64.rpm	84dd40788770d98b4d3c158dc4dbe0d77d081714b265d095b5c6f400cf13eb9d	-	ol10_aarch64_appstream
	qemu-kvm-block-curl-10.1.0-16.el10_2.5.aarch64.rpm	211aeb26c524252566adadcb9c80ce7d5a09e2ade777a982662e82f151335aa1	-	ol10_aarch64_appstream
	qemu-kvm-block-rbd-10.1.0-16.el10_2.5.aarch64.rpm	ca91b00dbf51098c1d67f129bf9be6672ba8509ac1683aa139b47f699ede7d15	-	ol10_aarch64_appstream
	qemu-kvm-common-10.1.0-16.el10_2.5.aarch64.rpm	344b3e00158047b54ba50b748e4c4966c573f853f31cfe94bff035db1110be51	-	ol10_aarch64_appstream
	qemu-kvm-core-10.1.0-16.el10_2.5.aarch64.rpm	8b499b7c367e2e217688c3fec28e706cd1e242ed7710993d023efe3ba2bb739d	-	ol10_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.5.aarch64.rpm	d477cd51815818ea5bb23e836840a01c75424fd241af598ed157757c33ee2ecf	-	ol10_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10_2.5.aarch64.rpm	8747d0cb8d5c6b74a1fdda5d9b850e2cd44a0fa9198796b2dde7f6c56629c400	-	ol10_aarch64_appstream
	qemu-kvm-device-usb-host-10.1.0-16.el10_2.5.aarch64.rpm	fd68181846e4913ab719cc6d1c1fc4683aed1f9e9bb0af91681756eb17b05970	-	ol10_aarch64_appstream
	qemu-kvm-device-usb-redirect-10.1.0-16.el10_2.5.aarch64.rpm	6b22a7cd66763ebed5de2cfee6863d0713cc8d5b2f880af6b8017823f53b864e	-	ol10_aarch64_appstream
	qemu-kvm-docs-10.1.0-16.el10_2.5.aarch64.rpm	c4b86ac700de48ddf7eb71d241b324fb4dc90c2c7d8fb7f368ae62adf5f0c206	-	ol10_aarch64_appstream
	qemu-kvm-tools-10.1.0-16.el10_2.5.aarch64.rpm	11565fe15407f3b27218059c230a171b84341446aa542f9edceab48adcb67497	-	ol10_aarch64_appstream
	qemu-pr-helper-10.1.0-16.el10_2.5.aarch64.rpm	1f065f43f19ba31775fce4311ab0722ec9d0f47f7234a3f90bdd954137a7dd1a	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	qemu-kvm-10.1.0-16.el10_2.5.src.rpm	6a9cdca2a26d80a9d368426fc167eca29ad7a2845011971d79322bfa5afb15a7	-	ol10_x86_64_appstream
	qemu-guest-agent-10.1.0-16.el10_2.5.x86_64.rpm	9c16700c3bbc683223b63a8d65228b8a08750962f64cdde55237bc8e55d53f5b	-	ol10_x86_64_appstream
	qemu-img-10.1.0-16.el10_2.5.x86_64.rpm	c1c78a1cb24e41812541b6baa85dbcc9ed2e256a2ceedadbc6d4c69fda29410a	-	ol10_x86_64_appstream
	qemu-kvm-10.1.0-16.el10_2.5.x86_64.rpm	eced3656ac197ae05bf5aca0fd69349fb02cb8523e093893d07be01030c05188	-	ol10_x86_64_appstream
	qemu-kvm-audio-pa-10.1.0-16.el10_2.5.x86_64.rpm	a848b687dc1ae81cf769f5a3d5b0bbd2941352179f54ef0d187b096c2c6031da	-	ol10_x86_64_appstream
	qemu-kvm-block-blkio-10.1.0-16.el10_2.5.x86_64.rpm	623155acd621307fce591f60d2509fb93c33b48916afc70e8cc893f093c404c5	-	ol10_x86_64_appstream
	qemu-kvm-block-curl-10.1.0-16.el10_2.5.x86_64.rpm	4381fac32b74d6b9adbd11a671e10f46ecaf8251d41a5734213b6c4bc9fe1948	-	ol10_x86_64_appstream
	qemu-kvm-block-rbd-10.1.0-16.el10_2.5.x86_64.rpm	3d711fa9869a4444480dc17c1e639f57b50badfe2887a5974e1cee56178ef919	-	ol10_x86_64_appstream
	qemu-kvm-common-10.1.0-16.el10_2.5.x86_64.rpm	b06a2ff859481c8acd4e9f205a68f937db68f5a097f84216830159bc0966e88d	-	ol10_x86_64_appstream
	qemu-kvm-core-10.1.0-16.el10_2.5.x86_64.rpm	145fdf224a8ae1b0c4a0b9151e7cf1a950219565463f96bd9ffb0b067f6e29a6	-	ol10_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.5.x86_64.rpm	365f5af7c8dc5b92a0557c0906dcd7c1358e1cf1913c75a0bd0b1e1072863928	-	ol10_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10_2.5.x86_64.rpm	5b6df72d5cfefa92c71c2967a073392c87d388529813c17d0cc40ed5a552ba14	-	ol10_x86_64_appstream
	qemu-kvm-device-display-virtio-vga-10.1.0-16.el10_2.5.x86_64.rpm	d2bebd9bbdd2b61dae22ffa5ff75f55f9bb0acb48c01a07845e6e31a6e0e6aa5	-	ol10_x86_64_appstream
	qemu-kvm-device-usb-host-10.1.0-16.el10_2.5.x86_64.rpm	096663c72ff466145a817c59c99dda9467bb76538d6c473acad00f9f6f43a2ba	-	ol10_x86_64_appstream
	qemu-kvm-device-usb-redirect-10.1.0-16.el10_2.5.x86_64.rpm	d876c6a6a6a58bc0f573a60e4313b4be8d06ced919f96badd1dc40aa0089b316	-	ol10_x86_64_appstream
	qemu-kvm-docs-10.1.0-16.el10_2.5.x86_64.rpm	9bbd10ffd60f4204ca02d7d3a2e13be725750ac30691736971b3f322a2899349	-	ol10_x86_64_appstream
	qemu-kvm-tools-10.1.0-16.el10_2.5.x86_64.rpm	2b477541ff05764e027c387dab012eb8c472527124e327e315e656619da8927f	-	ol10_x86_64_appstream
	qemu-kvm-ui-egl-headless-10.1.0-16.el10_2.5.x86_64.rpm	1f06d92b9685d6e2c853e91ea4efa796318124df6e47f0df2c7ad589f3aa9ef2	-	ol10_x86_64_appstream
	qemu-kvm-ui-opengl-10.1.0-16.el10_2.5.x86_64.rpm	78b2ef87b544bc959dcbb895786bd9c20e32fd1ac5a97a674a3531b745c4f4ad	-	ol10_x86_64_appstream
	qemu-pr-helper-10.1.0-16.el10_2.5.x86_64.rpm	406ad8511a688473bca8b2d8f55611285530db1d2c241deb0581338ed37e8a0a	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team