Back to Security Advisories
Low 2026-07-31

Qemu-Kvm Security Update — AlmaLinux 9 (ALSA-2026:39311)

AlmaLinux 9

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-4891…

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-4891…

Type:
security

Severity:
low

Release date:
2026-07-31

Description:
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Updated packages listed below:

Architecture Package Checksum
aarch64 qemu-kvm-tools-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 2b63c57c3287c52e741132d2bc77bfe35ccf4911e5342ec47425dce3eee40647
aarch64 qemu-img-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 2baf20a5aa28a3ffba29e6b61a4e2253114a206be6fa45b2f93f512523caf2cb
aarch64 qemu-kvm-docs-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 3382e46da41c1175d3f904d983f409f9a1932a4969ee5c40ecb0ada186f04f5a
aarch64 qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 3e2056492c77578b31d57269d052c8d6fc619a5c1dffd8c2b53236eb7fb1b70f
aarch64 qemu-guest-agent-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 4e05131dc755c50553dac7512268629ac0dc7652165ef3773f40a42f8db0681c
aarch64 qemu-kvm-block-rbd-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 6ace89f1de6354e742d46e79e7452ef4fa271b19e7cfed977dcacdcb5dc5a5c9
aarch64 qemu-kvm-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 992f4a99f2d4aeeefe558473a9148e86c76b4772f4701a9d8c0b50cdb7befe4a
aarch64 qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 9c59cf65aaac11003470b67728536ca09c5a3e555bf66167e27cddae2b525d9a
aarch64 qemu-kvm-device-usb-host-10.1.0-17.el9_8.4.alma.1.aarch64.rpm 9e14322c4cc7f221b6c6a34f0481b49db2dac3f0c6d32e7aaace2522d5599144
aarch64 qemu-pr-helper-10.1.0-17.el9_8.4.alma.1.aarch64.rpm a06517f1bf09003f7480c7384f1ddd0ddbe861d18a32d2dc1e64be05fd22ab9b
aarch64 qemu-kvm-audio-pa-10.1.0-17.el9_8.4.alma.1.aarch64.rpm a77e7214916b897e96006c6578d58546d8cc270ae2dd20851e076303952ceda0
aarch64 qemu-kvm-core-10.1.0-17.el9_8.4.alma.1.aarch64.rpm a824f872d5f1a35db86f5394ef5c6c76faefc0c12a8aa100dba5870fe3b83020
aarch64 qemu-kvm-block-blkio-10.1.0-17.el9_8.4.alma.1.aarch64.rpm cbeddcbf54646687f1445a1c13781339a9f1e780f733cd91a6f3f95eb21333ff
aarch64 qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.4.alma.1.aarch64.rpm da8b7de14dd01597f5ffeb5ad917db74caa279ece93b9687c7548ba98955667f
aarch64 qemu-kvm-block-curl-10.1.0-17.el9_8.4.alma.1.aarch64.rpm db55df0c46a2c702da2456026a45397dd84c4d9b19915cedb571e21ecdcd7893
aarch64 qemu-kvm-common-10.1.0-17.el9_8.4.alma.1.aarch64.rpm f109f5c5125703390f8d61ee06c4a28186f539c18634bf3f91faf3ee4feb34f7
ppc64le qemu-img-10.1.0-17.el9_8.4.alma.1.ppc64le.rpm 335988ae1a1bf76b3eb3def905602fee01af91f0884ad235d9ad9b7ec76f1fcf
ppc64le qemu-guest-agent-10.1.0-17.el9_8.4.alma.1.ppc64le.rpm b518c307590dac55c0c6874ca25bc942485d33c1854d694a79d340bf56b2fb6f
s390x qemu-kvm-device-display-virtio-gpu-ccw-10.1.0-17.el9_8.4.alma.1.s390x.rpm 072dac7b7611af1e35f0bd9ba1a353b1444a8a21a3e6df64967b088b9513fee1
s390x qemu-kvm-block-blkio-10.1.0-17.el9_8.4.alma.1.s390x.rpm 1387bfb24f9175fce7e234fe5200ec5c16fa250fbba5f97d35031db138f772fe
s390x qemu-kvm-core-10.1.0-17.el9_8.4.alma.1.s390x.rpm 1b208d9f7cdf48260f225cdac3c74da905249870a568cf9780de25c084fb64e3
s390x qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.4.alma.1.s390x.rpm 2036c62c53343b8d2b15561b8c50144baaedb4496ac8ec78275f1adeefdecf21
s390x qemu-pr-helper-10.1.0-17.el9_8.4.alma.1.s390x.rpm 31f7ae9bcba6671eaf854087e6d73574117c515587a4772c43e38575c89bafe1
s390x qemu-kvm-docs-10.1.0-17.el9_8.4.alma.1.s390x.rpm 409414de4e20e669c826e0b891514ae3e439a532d6a06d290a660326c3b7afb5
s390x qemu-kvm-common-10.1.0-17.el9_8.4.alma.1.s390x.rpm 67103286a9c5430070dacb9b8284e904b5113adbe777125ed8f4457b48b2f0aa
s390x qemu-kvm-block-rbd-10.1.0-17.el9_8.4.alma.1.s390x.rpm 877875d22fd12fd071e75137182ac1a17e21c01ca24ba64a303ecf2699459c54
s390x qemu-kvm-tools-10.1.0-17.el9_8.4.alma.1.s390x.rpm 91f4deac01bb9e53b661c388d992d43d8403938cbdcd35903fb0ccbe270afa56
s390x qemu-kvm-device-usb-host-10.1.0-17.el9_8.4.alma.1.s390x.rpm 997f4378f06775d57d3969cab96e07327c36d679842f961e851e02b8d4877cd2
s390x qemu-img-10.1.0-17.el9_8.4.alma.1.s390x.rpm ae005156c533c93e8f8e85099843cb43b8d173f5de47d71d76864c99f633fe95
s390x qemu-kvm-block-curl-10.1.0-17.el9_8.4.alma.1.s390x.rpm afe5260ce68d8f91afd8eb6cdca911b0ec4467122f11ebc6d8924f2879a66775
s390x qemu-kvm-audio-pa-10.1.0-17.el9_8.4.alma.1.s390x.rpm cf46b3093487afed3a941882cf2b621b92dd75c8f05b00ccedd9688f8e98766a
s390x qemu-kvm-10.1.0-17.el9_8.4.alma.1.s390x.rpm da0fe211f258a7023f1b3c259df3fa8cb1a71031709a76a0ae3a9484269a16ec
s390x qemu-guest-agent-10.1.0-17.el9_8.4.alma.1.s390x.rpm e46e142a66feb30bd4ae3657ce8d45460c2685d1468b532e613d2eb440d478e9
x86_64 qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 01757245504fddfae0168cfcbc847a59b93b631674645aa9be94bbc4a033ca19
x86_64 qemu-guest-agent-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 04122be1f3dedef53b6d0ae6e44b93bd19c0c58dab850e6abf4be890a54eb190
x86_64 qemu-pr-helper-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 23daf7a568cc48f329815780ff4a00f0d0fe4713fe8ade0cb221e27aa950c678
x86_64 qemu-kvm-tools-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 2569dacefd70a01bfc001d5ab73368469e1da7c70ea63a7759db15cb18a1fe04
x86_64 qemu-kvm-audio-pa-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 336b850996b47f963faf72212f14f4821fdfa92be6d9b5f781712c156cd06ecb
x86_64 qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 38201ff1ecdf033c86020efce4be9a49947bf439e3243fe95fa407b5172889ea
x86_64 qemu-kvm-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 42ef0f6d27a620c6d3ae07367d66b0ee2f9e3bf1d1534f9bc6648631188f5cd8
x86_64 qemu-kvm-core-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 52657be4b35afb9a5ffd98e1ea44b8eda16f901a95e96aec4dd9377f3c6f212d
x86_64 qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 5cc4bb81f4357e0d267861e43c36786b88daf8bac890b40cf0fc84cf5a9c70d1
x86_64 qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 97802a7961eee04440c8444af31661b34fbf7f3a2ff4ded5e2d52747b11cdd94
x86_64 qemu-kvm-common-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 9be96bff008e65c95366a5faa3a80bdacfc3696bcd2ba0ef976a9fede7b9c69f
x86_64 qemu-kvm-ui-opengl-10.1.0-17.el9_8.4.alma.1.x86_64.rpm a03464dce0efd9c0f4c84b61ba37f25a13446fde0305b86bfd8cb78f4cbb3a7b
x86_64 qemu-kvm-block-curl-10.1.0-17.el9_8.4.alma.1.x86_64.rpm c0a8b0079e8344c55901438bf92529186350b6d0308ee9abb6b8a821042f810f
x86_64 qemu-kvm-block-rbd-10.1.0-17.el9_8.4.alma.1.x86_64.rpm ce35772ef5b713cabf42734a3250a8f6cc5f3ed5275dc5839a4fb724d5b27fd6
x86_64 qemu-kvm-device-usb-host-10.1.0-17.el9_8.4.alma.1.x86_64.rpm d6e71190f7227479617dc8991b1e13fac5ba63305a2b6509a0f840170890d6b1
x86_64 qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.4.alma.1.x86_64.rpm d6f67076b3802506b2e968bdaed0063998d5fb8b15a03344543f53a35df8018b
x86_64 qemu-kvm-block-blkio-10.1.0-17.el9_8.4.alma.1.x86_64.rpm dcd90e23c10d405a78f6850415dc660ff73a549f83dfd3eb979b51d59734a315
x86_64 qemu-img-10.1.0-17.el9_8.4.alma.1.x86_64.rpm e3bf0974b719ca927f5aef83d94c4c47794cffec992ba5a1706e3a797b691767
x86_64 qemu-kvm-docs-10.1.0-17.el9_8.4.alma.1.x86_64.rpm ee4baa21bcc2d120890418a2586e887bae752c0d2b2dc0069d6c0f7e91119708

Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

More Information

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System