Back to Security Advisories
Qemu-Kvm Security Update — AlmaLinux 9 (ALSA-2026:88421)
ALSA-2026:88421 updates qemu-kvm on AlmaLinux 9, fixing CVE-2026-12080 in the user-space component of the KVM virtualization stack. Update with dnf update qemu-kvm and restart running VMs (or migrate them) so each guest runs under the patched QEMU process.
High
7.3 CVSS
AlmaLinux 9
What this means under a SharedLicense license
QEMU flaws are the guest-to-host boundary: whatever the flaw class, the attacker is a VM and the target is the host — every co-tenant on the node is behind that boundary.
| Architecture | Package | Checksum |
| aarch64 | qemu-kvm-audio-pa-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 07f4e864d1ffe6f8ab109672280cbfa259a21ebb1bffdf4839bb3b70ea5dead7 |
| aarch64 | qemu-kvm-tools-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 0c484ce43c1923e8b7cb93fe9e50f3b30fe0be9e77e5966befa96d349e84dae7 |
| aarch64 | qemu-kvm-common-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 0d9a26be55eec33240045df405a1449684b10c99cdde8ca060db463624bf631b |
| aarch64 | qemu-pr-helper-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 14a21e3a37850bd6af14b52ef5593e275c140a2ac8adcfce5e86ab003caecc81 |
| aarch64 | qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 380286fda883039286ca7b2b502b22d444038b4571bf307c761ea0ece739dbf0 |
| aarch64 | qemu-kvm-block-blkio-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 50e02aa3bea96282df8f75e17b85ec406e11780047faa23ddee33139b9e6e0a9 |
| aarch64 | qemu-kvm-device-usb-host-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 6de77f0e9f166b29b34f2962232e30615d798d293e97df897c440f978831b0f4 |
| aarch64 | qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 7018fa76440e6d82b5e02d526fb25cc53c574b32bcdf6a6eb461ca7332c66a06 |
| aarch64 | qemu-kvm-docs-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 83e752d537571c114bd6f153284f9b4ad7f3419880dcb5d2456d651945bb0a10 |
| aarch64 | qemu-kvm-block-curl-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | 86be521a0d5fabc4b2a617106700d1ed1c5f9db1aca1e0268a45e1c34fa77463 |
| aarch64 | qemu-kvm-block-rbd-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | aa3ab832f4c13fcc77b4ca56f9515fb3ee1dcce06f232f7aa1fc9501604efad4 |
| aarch64 | qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | c7464761802018695c81b41a3ebd7ff4f358a600e67e2e008eb36da9c92d7d82 |
| aarch64 | qemu-kvm-core-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | cb3276144405de97f2b33953bf09d6ed0c06612e2f66809fa6ce8f7f6272f73d |
| aarch64 | qemu-kvm-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | d0b2f24d581bb5c37606668bba6c97f62874a97475e28b6ccd88f5199bcd5602 |
| aarch64 | qemu-guest-agent-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | ef386a7bf63b9b01df67869468d3e6a4c6888f75ca02c0f7d1ceebd68b5c1ece |
| aarch64 | qemu-img-10.1.0-17.el9_8.9.alma.1.aarch64.rpm | f255aa27a51080e4e3ac4fa377061485cd7b81870330bbb5787da79c9b2c6dfb |
| ppc64le | qemu-guest-agent-10.1.0-17.el9_8.9.alma.1.ppc64le.rpm | 6b852a01407813b177bc17b515a7e9f69e1df97c89cd6062350039c66fc72870 |
| ppc64le | qemu-img-10.1.0-17.el9_8.9.alma.1.ppc64le.rpm | ad1b5ad7cd78626543e529c8e908ce9810f55c174a4efd56bc8aa162339a2bd0 |
| s390x | qemu-kvm-block-curl-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 13ce4d66c5d1b3f13ae625410ebbd787e643f7dc24788828ea3aec02a36ccc98 |
| s390x | qemu-pr-helper-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 1d14c5676904e2be8ee4aa908ae0796fa6507841066ed9f49814b248fd64c528 |
| s390x | qemu-kvm-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 1de2be06023cc4d3059e9c71d60293a7f39a75927263a71991079e36c4d73805 |
| s390x | qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 1fbfae974ad325dbbb7df0c3661286878c245bf556d91a5b43930ad08d2f211e |
| s390x | qemu-kvm-tools-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 33933e09cbe71e7692e1d23010d038bfae2cbc19c9b51713fe6be3e0c9730db5 |
| s390x | qemu-img-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 422c72d71b663f1a499e63a5aec6b5f4c0ef3650c2d1f714b76b509fe6117344 |
| s390x | qemu-kvm-device-usb-host-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 459a6cd99eb6a22817b754b26d81a4e632aee6eb923602d795f4f86177795441 |
| s390x | qemu-kvm-block-blkio-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 4aafca1e5a943126aeebb2c25c6f417c8fa1c9610ac88919e2e7f03fd5d1aa8a |
| s390x | qemu-kvm-block-rbd-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 685d94761bed41189d36278e358abb47d67dd279ef0112ae21d3826bce96f11a |
| s390x | qemu-kvm-core-10.1.0-17.el9_8.9.alma.1.s390x.rpm | 79bf3c438eeaba202b0a6c66b03a471f51fb61e393244f1f28e11cba3b846d90 |
| s390x | qemu-kvm-device-display-virtio-gpu-ccw-10.1.0-17.el9_8.9.alma.1.s390x.rpm | a1919c3da77c55285bfbb5bc654297acfa69d069d136a1f4ae838705e9fd5f28 |
| s390x | qemu-kvm-audio-pa-10.1.0-17.el9_8.9.alma.1.s390x.rpm | bb38e94dbc643b7783ba8ac57b93cd1055020c9182a990804d35eb7f13cea3de |
| s390x | qemu-kvm-common-10.1.0-17.el9_8.9.alma.1.s390x.rpm | e3227c14c115ea63b3d6b8c955eab213b6cc0b6c43f1ad27ed1bf10c5327e731 |
| s390x | qemu-kvm-docs-10.1.0-17.el9_8.9.alma.1.s390x.rpm | e48450d1cb23f144295564414d5225eb0e8c5b4bae3a1bc1d927f1c12863aef8 |
| s390x | qemu-guest-agent-10.1.0-17.el9_8.9.alma.1.s390x.rpm | f9db41bf63ec3231ee8e33edf1f9122053135cae61704c71fd0ec5c670ab0261 |
| x86_64 | qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 032daba06228239eef063015a3a75ce624183c064088dcebc2d7f3fd723d27d9 |
| x86_64 | qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 03f60eb8834344fe775eeaed017f355de4b7dcbf1577cee7bac30231dff6003b |
| x86_64 | qemu-kvm-common-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 09b4d4e16cb523d7d70c90f709441109f245f2278c9e04c1cc26fe4bc6f1e930 |
| x86_64 | qemu-kvm-docs-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 0ae4c3daaafa32c3955e199a14d0150b03f80f97b798c9447dc7f3a4b8a8844f |
| x86_64 | qemu-img-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 0f8ef5af65bba25711c8dda772feafe9145232d6bbaae06ddcea6fe286f39e51 |
| x86_64 | qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 1b72b38765389a21a55f12aa1010c6b681a088435862731db7153f141241ebee |
| x86_64 | qemu-kvm-tools-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 503916c85cf43c275b6406a73b9791df8acbbae7b3e6781debbbcca62dfb40b1 |
| x86_64 | qemu-kvm-core-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 598f378f8500245952197dfc3cfd782f222f1effd2defeeaf221536dc8285462 |
| x86_64 | qemu-kvm-ui-opengl-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 5ec14bf451760ecde76d0c60ee0a08ea0c58ba2aaec460459a1aded36cc20d3a |
| x86_64 | qemu-kvm-audio-pa-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 911c4909589bc5ab1e3ef92f45b161e4195f38ce373120171d563dd8de974640 |
| x86_64 | qemu-kvm-block-curl-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | 9602fddd59d91539e1ce9e34e96da02cf72ee47069b358131d39660cf7d6989b |
| x86_64 | qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | ba9994fdb62102cca10e7fe993d2615d28cfe859c3aeddf9e76ebb76d230be1e |
| x86_64 | qemu-kvm-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | bd2f13052f1eba733092bd3111ffbd16036677b32a554af4f29565be17623b10 |
| x86_64 | qemu-pr-helper-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | d321d90a0876a86ac15ad570fac38c5bcd076667e303e7b72ec80ee911ad86c9 |
| x86_64 | qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | dd5400e5ecfc9ba00afac9850e75ef18410c9f19eaa3930aa5d9fda9537322e9 |
| x86_64 | qemu-kvm-block-rbd-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | e1c0a274e2004acd92170dc67419b81f51fde140966bd7429abef4ce406ca9c0 |
| x86_64 | qemu-guest-agent-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | e3dac55511f5ca9d72a7c2599c386cca8163b78eabe033565012ef1b17f1fb41 |
| x86_64 | qemu-kvm-device-usb-host-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | ea69ed345222d97fc66674fb20dd5c8503bc331f6a71c5590fde7e948c0710a5 |
| x86_64 | qemu-kvm-block-blkio-10.1.0-17.el9_8.9.alma.1.x86_64.rpm | fa640f6ad9fc9054e12616472c1ced2a25f2a2d3f9a15e8ad3a21a48b6e51ae2 |
Frequently Asked Questions
What is CVE-2026-12080?
It is a vulnerability in the qemu-kvm user-space virtualization component on AlmaLinux 9, fixed in the update ALSA-2026:88421. The erratum covers the QEMU process that runs guest VMs under KVM.
Who is affected?
AlmaLinux 9 KVM hosts — every virtual machine running under an unpatched QEMU process shares the exposure to guest-triggered flaws in the virtualization layer.
How do I apply the fix?
Run dnf update qemu-kvm and then migrate or shut down and restart running VMs — guests only gain the fix when their QEMU process restarts. Plan the restart window per host.
Do guests need their own update?
Guests need their own OS updates regardless — this erratum fixes the host-side virtualization layer, which is a separate surface from what runs inside each guest.
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System