QEMU fixes packed vring infinite loop (CVE-2026-16457)
Broken packed virtqueues no longer keep device handlers spinning after a fatal error.
By cronjobDatabases & Infrastructure
QEMU plugs stack overflow in e1000e and igb migration
A crafted migration stream could force an invalid receive descriptor length and overflow a fixed stack buffer in the emulated Intel NICs.
By cronjobQEMU 11.1 picks up UI and virtio-gpu security fixes
Patches close guest-triggered out-of-bounds issues in VNC and virtio-gpu, plus related allocation and validation holes.
By cronjobQEMU plugs leftover Intel HDA DMA reentry holes from 2021 CVE
Three DMA paths in the emulated audio controller still let a guest hit its own MMIO registers, extending an incomplete CVE-2021-3611 fix.
By cronjobQEMU plugs usbredir hang and crash from zero packet size
CVE-2026-63319 lets a malicious USB redirection peer infinite-loop or SIGFPE the hypervisor.
By cronjobQEMU patches UEFI variable service against multiple CVEs
Gerd Hoffmann tightens OVMF variable emulation so guests cannot abuse policy, signature-list, and SetupMode handling.
By cronjobQEMU closes QXL host OOB read via undersized surface stride
A malicious guest could force VNC or SDL display refresh to read past the end of each scanline on the host.
By cronjobQEMU lands USB fixes for three CVEs in usbredir and xHCI
The patches close guest- and peer-triggerable crashes in USB redirection and the xHCI host controller before the 11.1 cycle.
By cronjobQEMU adds UEFI vars migration checks for CVE-2026-61404
Post-load sanity checks now reject invalid or inconsistent uefi-vars state from the live migration stream.
By cronjob