ELSA-2026-18772

ELSA-2026-18772 - qemu-kvm security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-06-12

Description

[10.1.0-17]
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
(Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
(Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
(qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])

[10.1.0-16]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

[10.1.0-15]
- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
(Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])

[10.1.0-14]
- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])

[10.1.0-13]
- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
(virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
(VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])

[10.1.0-12]
- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
(Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
(Intel IOMMU VM freezes: 'call_irq_handler: 3.37 No irq handler for vector'[rhel-9.8])
- Resolves: RHEL-139057
([qemu, rhel-9] increase default TSEG size)

[10.1.0-11]
- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
(QEMU crashes when stopping source VM during live migration [rhel-9])

[10.1.0-10]
- kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
- Resolves: RHEL-132193
([rhel 9.8]L1VH qemu downstream initial merge RHEL9)

[10.1.0-9]
- kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
- kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
- kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
- kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
- kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
- kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
- kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
- kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
- kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
- kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
- kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
- kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
- kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
- kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
- kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
- kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
- kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
- kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
- kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
- Resolves: RHEL-131144
(qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
- Resolves: RHEL-132193
([rhel 9.8]L1VH qemu downstream initial merge RHEL9)

[10.1.0-8]
- kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-133303]
- Resolves: RHEL-133303
(The VM hit io error when do S3-PR integration on the pass-through failover multipath device [rhel-9])

Related CVEs

CVE-2025-11234

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	qemu-kvm-10.1.0-17.el9_8.src.rpm	218c2d70c45062075d3d354bde9026eb64db7b1d12aeab9211d1de7e2275b56c	-	ol9_aarch64_appstream
	qemu-guest-agent-10.1.0-17.el9_8.aarch64.rpm	6b1c7f6f0e7a4dd5f093640512b78472b85a44392574832c66903d3a777576bd	-	ol9_aarch64_appstream
	qemu-img-10.1.0-17.el9_8.aarch64.rpm	24de21cd59a0f172c1f4b385e3f747d22ff2528978e4cb6386e84d83a3d14d66	-	ol9_aarch64_appstream
	qemu-kvm-10.1.0-17.el9_8.aarch64.rpm	3b1c3c0c46dfabe23963169dd045c35b2e6d744a04ef4c5f77224e8f00bcd196	-	ol9_aarch64_appstream
	qemu-kvm-audio-pa-10.1.0-17.el9_8.aarch64.rpm	0bf1ab5a8bfad1b1a199d277dc9f2ecbb89045a2c452365566fca42ce6902033	-	ol9_aarch64_appstream
	qemu-kvm-block-blkio-10.1.0-17.el9_8.aarch64.rpm	14f38c787c602c7ca786d34266adcf02ef87ec95942cfbcc4bfdfec982bd1a71	-	ol9_aarch64_appstream
	qemu-kvm-block-curl-10.1.0-17.el9_8.aarch64.rpm	1a4443abcfbef96537e613989460f88032d2445fd81b655aa91cac50d424010e	-	ol9_aarch64_appstream
	qemu-kvm-block-rbd-10.1.0-17.el9_8.aarch64.rpm	a419cdb9b36577f12011f588159d7726a50de14a06b51101d8e573ff709cb821	-	ol9_aarch64_appstream
	qemu-kvm-common-10.1.0-17.el9_8.aarch64.rpm	c0b307a63416a6e4ad965ba56abbf998d5a6d9fd0d8f35fc4bb6285c3d282c4c	-	ol9_aarch64_appstream
	qemu-kvm-core-10.1.0-17.el9_8.aarch64.rpm	6e79b847ab0f9355882fb79a328fb2ae9a85a5e6b70ddded6d8879dd1ce9c832	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.aarch64.rpm	6f31627e05713147b91455c085348c04cb2f9839b2dd5af3a1828729b3dfdf79	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.aarch64.rpm	88b0397e0a38791989a4d9487ceaaa882f3b38aa937eb2a6cb26179dc3fccac9	-	ol9_aarch64_appstream
	qemu-kvm-device-usb-host-10.1.0-17.el9_8.aarch64.rpm	c3b0538f80e9e9f9b08971d97c6249a1accdc8e1539c3c836081ca034869c5bb	-	ol9_aarch64_appstream
	qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.aarch64.rpm	688227c39bcb91612be6def8113a84479f53e19e0dc14b55d2cee7788dbbab61	-	ol9_aarch64_appstream
	qemu-kvm-docs-10.1.0-17.el9_8.aarch64.rpm	f5b8e8b1af1fdbb6e4ea72d2ebd1578cbf9cbfa81a1724d1cb4e3a18b4efde4b	-	ol9_aarch64_appstream
	qemu-kvm-tools-10.1.0-17.el9_8.aarch64.rpm	72c1a65af7391834447e787eb838bdc33be01236c1ec14daa4f51dc6b2cf394e	-	ol9_aarch64_appstream
	qemu-pr-helper-10.1.0-17.el9_8.aarch64.rpm	1412fce6391ee43f822be41f3b29512ca5a5dab7529527649785776fce8fc3f8	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	qemu-kvm-10.1.0-17.el9_8.src.rpm	218c2d70c45062075d3d354bde9026eb64db7b1d12aeab9211d1de7e2275b56c	-	ol9_x86_64_appstream
	qemu-guest-agent-10.1.0-17.el9_8.x86_64.rpm	083ca3bdabb55ea3da42ec0981bba41353efba90ac1210575055329c2006a6ea	-	ol9_x86_64_appstream
	qemu-img-10.1.0-17.el9_8.x86_64.rpm	76875a3ef654848cacf1021ec898fb997214f24d5c224587de88cb474dd78e40	-	ol9_x86_64_appstream
	qemu-kvm-10.1.0-17.el9_8.x86_64.rpm	feac6f292b829dfddd419d59591c63e96a26dfa3ef3756df9897f0aff92a8eb1	-	ol9_x86_64_appstream
	qemu-kvm-audio-pa-10.1.0-17.el9_8.x86_64.rpm	2a73b6f9bb0d6aad70eca33e4cf02f5971dc831efd62c89b96ca5f7fbaff64ec	-	ol9_x86_64_appstream
	qemu-kvm-block-blkio-10.1.0-17.el9_8.x86_64.rpm	2195757c82193dd2bfdeac783b1563fce4157e5cdef9a882777b5734fc9ca9fc	-	ol9_x86_64_appstream
	qemu-kvm-block-curl-10.1.0-17.el9_8.x86_64.rpm	9d0667a0bb0f02de9ba2349a58c66fa57cff1d31d47f9ce922f095c912278e72	-	ol9_x86_64_appstream
	qemu-kvm-block-rbd-10.1.0-17.el9_8.x86_64.rpm	d1c5d17770f6a0c42d088c76869a7d3495331dfbe0d32759ed622afc8154b3cd	-	ol9_x86_64_appstream
	qemu-kvm-common-10.1.0-17.el9_8.x86_64.rpm	f36a93b604c5066250b70de0166d1858ab3a8937676caa9f0a13aa30d17af2c0	-	ol9_x86_64_appstream
	qemu-kvm-core-10.1.0-17.el9_8.x86_64.rpm	0873156bf93e6f5335f803b2a9cc4126e58d198d603afb8754efc1d1a8a41361	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.x86_64.rpm	1016af9f219fc6c0865e7d39c809be9bfc3b53c02b0e30233a4a10322e5349ad	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.x86_64.rpm	d64afa6f6ec5e28ca0e0fcb9e4386701078347979454189a2f43a7a87aa3e3a8	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.x86_64.rpm	031bfbd034a373b332059b5a056194cdae32f3a5f0dee70771cdc5f3e18df1de	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-host-10.1.0-17.el9_8.x86_64.rpm	5868ccc706404c5c2b74ca9d9a530fdbfaf4a1954dae923b3c572fd557cb19ee	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.x86_64.rpm	327d8b1ceb79729a491f2569fb825b0aac0b926cc1bf27cb612faec439380fce	-	ol9_x86_64_appstream
	qemu-kvm-docs-10.1.0-17.el9_8.x86_64.rpm	818f7a064455216843c7176e88acdaf6301f359dd304cadfa4de965da5255d2f	-	ol9_x86_64_appstream
	qemu-kvm-tools-10.1.0-17.el9_8.x86_64.rpm	6d22130ede0166c00f830df75fa8eca8c85efafe41da419dd9c59182d50c59b9	-	ol9_x86_64_appstream
	qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.x86_64.rpm	a4221b4deee865caef3cfe73db0dbdc57bf5e80ce9c6ffd2a8ce1e070a2b7641	-	ol9_x86_64_appstream
	qemu-kvm-ui-opengl-10.1.0-17.el9_8.x86_64.rpm	7ed0d750ff161fa33ab4251a6cb7436fd36dc105932fef3caca3770a3a25c6fa	-	ol9_x86_64_appstream
	qemu-pr-helper-10.1.0-17.el9_8.x86_64.rpm	f15f611904bd52e4eb6d53395bde1237a2660bf28d76c9888006756bec366de0	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team