ELSA-2026-500245

ELSA-2026-500245 - qemu-kvm security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-03

Description

[7.2.0-43.el9]
- dmg: reject inconsistent UDRW chunk sector count and length (CVE-2026-65928) (Stefan Hajnoczi) [Orabug: 39849788] {CVE-2026-65928}
- dmg: fix out-of-bounds load in search_chunk() (CVE-2026-65929) (Stefan Hajnoczi) [Orabug: 39849747] {CVE-2026-65929}
- virtio: avoid packed vring virtio_queue_empty() infinite loops (CVE-2026-16457) (Stefan Hajnoczi) [Orabug: 39844863] {CVE-2026-16457}
- hw/net/virtio-net: Protect from DMA re-entrancy bugs (Laurent Vivier) [Orabug: 39843811] {CVE-2026-66022}
- libvduse: validate vq size (Michael S. Tsirkin) [Orabug: 39825932] {CVE-2026-61402}
- libvhost-user: fix heap overflow in vu_check_queue_inflights (Michael S. Tsirkin) [Orabug: 39843801] {CVE-2026-63110}
- libvhost-user: validate last_batch_head in vu_check_queue_inflights (Michael S. Tsirkin) [Orabug: 39843801] {CVE-2026-63110}
- virtio-net: fix short frame OOB read in receive_filter() (Michael S. Tsirkin) [Orabug: 39843795] {CVE-2026-63320}
- hw/9pfs: fix O_TRUNC bypass on read-only export (Christian Schoenebeck) [Orabug: 39804678] {CVE-2026-63318}
- hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise() (Thomas Huth) [Orabug: 39793551] {CVE-2026-16043}
- usbredir: fix use-after-free on buffered bulk packet overflow (Marc-Andre Lureau) [Orabug: 39793554] {CVE-2026-15705}
- ui/vnc: validate SetPixelFormat field ranges (Marc-Andre Lureau) [Orabug: 39804658] {CVE-2026-15578}
- target/i386: add compatibility property for arch_capabilities (Paolo Bonzini) [Orabug: 39935277]
- hw/i386: Add pc-q35-7.2-exadata-v2 machine (Mark Kanda) [Orabug: 39917084]

Related CVEs

CVE-2026-15578

CVE-2026-15705

CVE-2026-16043

CVE-2026-16457

CVE-2026-61402

CVE-2026-63110

CVE-2026-63318

CVE-2026-63320

CVE-2026-65928

CVE-2026-65929

CVE-2026-66022

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	qemu-kvm-7.2.0-43.el9.src.rpm	3655d2a1d1b3508e5291bfc5ca443d043a9c7cc8bafb62b9b65c22567c2bae30	-	ol9_aarch64_kvm_utils
	qemu-guest-agent-7.2.0-43.el9.aarch64.rpm	f560146e9fe1e8cffad1ffa274980b6d43462562abb13391452e39bdd9246de4	-	ol9_aarch64_kvm_utils
	qemu-img-7.2.0-43.el9.aarch64.rpm	21e779c9a0dee4f165a7a0f0a0eb8fa4dd1debc868f6635e78d8a6e0e5852e9b	-	ol9_aarch64_kvm_utils
	qemu-kvm-7.2.0-43.el9.aarch64.rpm	eaa0adce3cf82a443d5cccad4d7e8cc86ac4065de58a61dc08fc355bb83922f2	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-curl-7.2.0-43.el9.aarch64.rpm	b8eccf7f0660b73aee6811c96c1b853e6d55b346d6459bbe60add03c194e3258	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-iscsi-7.2.0-43.el9.aarch64.rpm	706b45c6eb0b15d6e0166fc9c6ef26cb9c3c186a8c64296b08d5358049bcb867	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-rbd-7.2.0-43.el9.aarch64.rpm	2b77796ef19eff271a1cbe70469a05301553cc3a99f7db1db4f92c4f46a03c6c	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-ssh-7.2.0-43.el9.aarch64.rpm	943ac0ac11b1cc39b2d03f16ea735861e21e3404cea83885d709d409abaeb00a	-	ol9_aarch64_kvm_utils
	qemu-kvm-common-7.2.0-43.el9.aarch64.rpm	55033e307429766768a407d0da33857cd1644048356108483cab534ccad961f8	-	ol9_aarch64_kvm_utils
	qemu-kvm-core-7.2.0-43.el9.aarch64.rpm	e84731173fb6a307cd119dcd95bee052b843009d2d2e50ed643b0297b81e8096	-	ol9_aarch64_kvm_utils
	qemu-kvm-device-usb-host-7.2.0-43.el9.aarch64.rpm	d1e48e4219e2be82a3be3a21d9c3259892cc014aa1c100fc35da733ab988e5ca	-	ol9_aarch64_kvm_utils
	qemu-virtiofsd-7.2.0-43.el9.aarch64.rpm	beb57d90d10ec1beb04a1f1e6bb72acbc78eebbe654dbf7846b39e24646c7cda	-	ol9_aarch64_kvm_utils
Oracle Linux 9 (x86_64)	qemu-kvm-7.2.0-43.el9.src.rpm	3655d2a1d1b3508e5291bfc5ca443d043a9c7cc8bafb62b9b65c22567c2bae30	-	ol9_x86_64_kvm_utils
	qemu-guest-agent-7.2.0-43.el9.x86_64.rpm	ce41f7ccc7b107d4817bae1cc6600f15828c6261c78c51c2c0b0bb9ebcc78a42	-	ol9_x86_64_kvm_utils
	qemu-img-7.2.0-43.el9.x86_64.rpm	7befcb2a999daafb01993c4668d8aaa8c8e20509e86228371486a6734678d4b7	-	ol9_x86_64_kvm_utils
	qemu-kvm-7.2.0-43.el9.x86_64.rpm	1ba9907a104641f5c77e73690bf635aa8777bae62d1e19e952f7aa6ca27d72f7	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-curl-7.2.0-43.el9.x86_64.rpm	a02616adc0a603113a178a9e373052372537b779ccd040f51a5eaf4f4e97a65e	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-iscsi-7.2.0-43.el9.x86_64.rpm	a8efb0da804ea4fe17b6b78c4d3d8c54140a893c90ead8432fa8d23859de1c2e	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-rbd-7.2.0-43.el9.x86_64.rpm	da23a178e8b9240aa1db1f47c651e852fe9fa4ee68d95784794d796bac22d726	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-ssh-7.2.0-43.el9.x86_64.rpm	c3f64913638e29f7aa491782337f9ce10b6757c8fd0779dfce0f01c827b36c86	-	ol9_x86_64_kvm_utils
	qemu-kvm-common-7.2.0-43.el9.x86_64.rpm	56622d7ba4ca66dee95cc31dfda210f2f56c268e4a1562b2f4860458eaae617c	-	ol9_x86_64_kvm_utils
	qemu-kvm-core-7.2.0-43.el9.x86_64.rpm	1dc51b77a6dd19929a78349854575027014f8c4b23e2d780f310c1674cccb416	-	ol9_x86_64_kvm_utils
	qemu-kvm-device-usb-host-7.2.0-43.el9.x86_64.rpm	d44a9f626af708a65a8dc8770db51217b70cc57c22ce5108f73b00b07bb33331	-	ol9_x86_64_kvm_utils
	qemu-virtiofsd-7.2.0-43.el9.x86_64.rpm	1749bc314c20b35e2875efa4da3fd193040419b1613f23eca7206a6975d95c0e	-	ol9_x86_64_kvm_utils

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team