ELSA-2026-88421

ELSA-2026-88421 - qemu-kvm security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-03

Description

[10.1.0-17.el9_8.9]
- kvm-qcow2-Add-keep_data_file-command-line-option.patch [RHEL-164549]
- kvm-qcow2-Simplify-size-round-up-in-co_create_opts.patch [RHEL-164549]
- kvm-iotests-common.filter-Sort-keep_data_file.patch [RHEL-164549]
- kvm-iotests-244-Add-test-cases-for-keep_data_file.patch [RHEL-164549]
- kvm-target-i386-mshv-switch-mmio-pagewalk-to-mshv-mmu.patch [RHEL-283121]
- kvm-target-i386-mshv-add-soft-mmu-for-pagewalk.patch [RHEL-283121]
- kvm-pr-manager-helper-fix-sense-buffer-overflow.patch [RHEL-280223]
- kvm-scsi-increase-sense-buffer-size-in-scsi_SG_IO.patch [RHEL-280223]
- kvm-hw-scsi-disk-move-MIG_EVENT_FAILED-into-a-new-functi.patch [RHEL-280223]
- kvm-qemu-pr-helper-add-PR_HELPER_CLEANUP-for-live-migrat.patch [RHEL-280223]
- kvm-pr-manager-helper-add-PR_HELPER_CLEANUP-command-supp.patch [RHEL-280223]
- kvm-file-posix-forward-PR_HELPER_CLEANUP-commands-to-pr-.patch [RHEL-280223]
- kvm-scsi-clean-up-persistent-reservation-state-after-mig.patch [RHEL-280223]
- kvm-scsi-use-REGISTER-AND-IGNORE-EXISTING-KEY-for-robust.patch [RHEL-280223]
- kvm-scsi-document-PR_HELPER_CLEANUP-command.patch [RHEL-280223]
- Resolves: RHEL-164549
(qemu-img can't create a qcow2 overlay with 'data_file' feature on top of a file without destroying the original image [rhel-9.8.z])
- Resolves: RHEL-283121
(Fix pending QEMU issues for L1VH GA - QEMU [rhel-9.8.z])
- Resolves: RHEL-280223
(live migration of a VM with a scsi3pr to a node that previously held a reservation on that disk fails. [rhel-9.8.z])

[10.1.0-17.el9_8.7]
- kvm-qga-Change-effective-user-group-ID-in-guest-ssh-comm.patch [RHEL-212575]
- Resolves: RHEL-212575
(CVE-2026-12080 qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys [rhel-9.8.z])

Related CVEs

CVE-2026-12080

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	qemu-kvm-10.1.0-17.el9_8.9.src.rpm	85834ca7423006672f2cf95e2abc1ad81f2b0356baab2acb5edfd64dbc3ba637	-	ol9_aarch64_appstream
	qemu-guest-agent-10.1.0-17.el9_8.9.aarch64.rpm	7b1c7822dff01feef0a1db9e557ca7180faa2781af7c0975b2ef120a93625654	-	ol9_aarch64_appstream
	qemu-img-10.1.0-17.el9_8.9.aarch64.rpm	70a73055051a01cdb0ed2795721b7abec6d1c277575c4fe7aae38498ef760232	-	ol9_aarch64_appstream
	qemu-kvm-10.1.0-17.el9_8.9.aarch64.rpm	29fa6bbecd2dd8a3f5aef6b1f38b55295e096bdc2534b3e4a3d71f218ed71069	-	ol9_aarch64_appstream
	qemu-kvm-audio-pa-10.1.0-17.el9_8.9.aarch64.rpm	7295eccbf3fe4355aa3f805e96e1f709ff05c33ffc0773755e3a9e648bdaad6a	-	ol9_aarch64_appstream
	qemu-kvm-block-blkio-10.1.0-17.el9_8.9.aarch64.rpm	249999a8d5c4428ecf49a4ca36bf84b1cd1f55dddc2275e0802349cc45c1cf95	-	ol9_aarch64_appstream
	qemu-kvm-block-curl-10.1.0-17.el9_8.9.aarch64.rpm	3c86e6ad41701057c3a51a9004c068fb6410e96a6e19a75886f6b276db9e7925	-	ol9_aarch64_appstream
	qemu-kvm-block-rbd-10.1.0-17.el9_8.9.aarch64.rpm	0f60809457697662e227fe6d72f7b145b1b6c6cb08b7963c3b7292f3aabe40e5	-	ol9_aarch64_appstream
	qemu-kvm-common-10.1.0-17.el9_8.9.aarch64.rpm	d8c27ba5fd509f0974c3487c09844b04f6d5c8221015a82e7840364e6a192a01	-	ol9_aarch64_appstream
	qemu-kvm-core-10.1.0-17.el9_8.9.aarch64.rpm	b12d3ee05020d0b6bd7991959a78d1b8a0cee626e22195edc52aa2465d4482c5	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.9.aarch64.rpm	1947e193c3f7f44413e5f3d437fa1bd2820b0baaba3d6072c4d9c4c0301f5a51	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.9.aarch64.rpm	9794e52866d91662e5d54500fe0fad94ff93ef11d033d9915fc69cb0aae50b4f	-	ol9_aarch64_appstream
	qemu-kvm-device-usb-host-10.1.0-17.el9_8.9.aarch64.rpm	51dc6faec366fabc6584ad302b7216cfcec1323b923cb277bffe25808a19270a	-	ol9_aarch64_appstream
	qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.9.aarch64.rpm	411c24487d5d56c7e001337d3498841f934faba93b872869d227ef5c68e0021a	-	ol9_aarch64_appstream
	qemu-kvm-docs-10.1.0-17.el9_8.9.aarch64.rpm	5ab4088304a3e5357a465b125f20683596a4d422091779bab7ccf06428945dc8	-	ol9_aarch64_appstream
	qemu-kvm-tools-10.1.0-17.el9_8.9.aarch64.rpm	cf68887547d57d214a9c26850ed9d5ba2b3ac009bc1c8d4aba6605b48856d111	-	ol9_aarch64_appstream
	qemu-pr-helper-10.1.0-17.el9_8.9.aarch64.rpm	ac5018c1dc65be95bc8f7b364d0fa6c4413b6b5c44f33b2a1dc336c23c7c19d6	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	qemu-kvm-10.1.0-17.el9_8.9.src.rpm	85834ca7423006672f2cf95e2abc1ad81f2b0356baab2acb5edfd64dbc3ba637	-	ol9_x86_64_appstream
	qemu-guest-agent-10.1.0-17.el9_8.9.x86_64.rpm	aecdf362e57e76ede46df1ef989adf2532d8aff5a2ca22f260320b146183897f	-	ol9_x86_64_appstream
	qemu-img-10.1.0-17.el9_8.9.x86_64.rpm	67df7c40f7fa821cb6f7ef4eb2e85a0e17cbc70f44afef07f54912b5841fcc0e	-	ol9_x86_64_appstream
	qemu-kvm-10.1.0-17.el9_8.9.x86_64.rpm	2598246fe096e9e28f0f8c6c03a70ec544e8daaa6c1bf0272610e8a69f28886b	-	ol9_x86_64_appstream
	qemu-kvm-audio-pa-10.1.0-17.el9_8.9.x86_64.rpm	24bdfc06de7cf41d10748b4ac8b6afc888d36ff737d70a33520ac72b8b8eb02c	-	ol9_x86_64_appstream
	qemu-kvm-block-blkio-10.1.0-17.el9_8.9.x86_64.rpm	31b9f2697a3bf1bf6dd1a4d09be3708d62c9b07d69ffc94c065f7a5b7f566239	-	ol9_x86_64_appstream
	qemu-kvm-block-curl-10.1.0-17.el9_8.9.x86_64.rpm	280767cfb83e8daf08ed255fd79e68976c8b3ee7749d48bd629b8e4412d22f24	-	ol9_x86_64_appstream
	qemu-kvm-block-rbd-10.1.0-17.el9_8.9.x86_64.rpm	8db7a23b87ab7cf92690d3c029eac621556d51fe9c28f4087af1e0327752687d	-	ol9_x86_64_appstream
	qemu-kvm-common-10.1.0-17.el9_8.9.x86_64.rpm	6c3548c2d5a17873eff4f941a3f7079be4cb5b69cc6fda7b7283d75d4afe3061	-	ol9_x86_64_appstream
	qemu-kvm-core-10.1.0-17.el9_8.9.x86_64.rpm	6f42341b5212f6ee9b59bc1ecca658ab188cb6d487f3e5df9f29249cf2857252	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.9.x86_64.rpm	e6f14d1f0ba7ff7081aae5a00ef5211870313c50464b0c57af76fba62e239240	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.9.x86_64.rpm	70d0412f1e3a0cdda5e9db409d70a921c6deb7f6832f1e45e5a90ea0577cadf5	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.9.x86_64.rpm	8c96beff8cea20279a4c70124cf884810cc58fe4848c89ef55640576e5293cea	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-host-10.1.0-17.el9_8.9.x86_64.rpm	434f6ebf555c2e465d2e5fd54eda38da2869e536b65f155a4a7da59d14365e72	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.9.x86_64.rpm	cd44970a72e4005ddae475e303356bd289e6c77d8bf552d72ee8a4dd61529692	-	ol9_x86_64_appstream
	qemu-kvm-docs-10.1.0-17.el9_8.9.x86_64.rpm	b28d7af7341854524aa40aa1ad968992682e03bdf13a9c4ee479958e1d5225f2	-	ol9_x86_64_appstream
	qemu-kvm-tools-10.1.0-17.el9_8.9.x86_64.rpm	1db690328a12dc0146a0ca2db9856a2c56f516fe32660c43924e15696ec0a393	-	ol9_x86_64_appstream
	qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.9.x86_64.rpm	5fee140f64602e0ad8e46b8cb84784de5be65eeeaaf4904522f46532d27aa490	-	ol9_x86_64_appstream
	qemu-kvm-ui-opengl-10.1.0-17.el9_8.9.x86_64.rpm	cad2b134d7cd10626741d66ecd4eefcf46cb12971831af4ec07ccbd3df459d2d	-	ol9_x86_64_appstream
	qemu-pr-helper-10.1.0-17.el9_8.9.x86_64.rpm	04dd1de446a066283de9754ba8bfd62c1f94960fd0220de4550f16748d811642	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team