Oracle Errata System
Oracle Linux
5.11
2026-07-15T09:51:48
ELSA-2026-39311: qemu-kvm security update (LOW)
Oracle Linux 9
[10.1.0-17.el9_8.4]
- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
(CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])
LOW
Copyright 2026 Oracle, Inc.
CVE-2026-48914
cpe:/a:oracle:linux:9::appstream
qemu-kvm-common
qemu-kvm-ui-opengl
qemu-kvm-block-rbd
qemu-kvm-device-usb-redirect
qemu-kvm-block-curl
oraclelinux-release
qemu-kvm
qemu-kvm-docs
qemu-kvm-device-display-virtio-gpu
qemu-kvm-ui-egl-headless
qemu-guest-agent
qemu-kvm-block-blkio
qemu-img
qemu-kvm-audio-pa
qemu-kvm-core
qemu-pr-helper
qemu-kvm-device-display-virtio-vga
qemu-kvm-tools
qemu-kvm-device-usb-host
qemu-kvm-device-display-virtio-gpu-pci
bc4d06a08d8b756f
^9
aarch64
17:10.1.0-17.el9_8.4
x86_64