RLSA-2026:88421

RLSA-2026:88421 · Important: qemu-kvm security, bug fix, and enhancement update

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys (CVE-2026-12080) Bug Fix(es) and Enhancement(s): * qemu-img can't create a qcow2 overlay with 'data_file' feature on top of a file without destroying the original image [rhel-9.8.z] (JIRA:Rocky Linux-164549) * live migration of a VM with a scsi3pr to a node that previously held a reservation on that disk fails. [rhel-9.8.z] (JIRA:Rocky Linux-280223) * Fix pending QEMU issues for L1VH GA - QEMU [rhel-9.8.z] (JIRA:Rocky Linux-283121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 7.3 · Élevée · Correctif disponible

Publication

2026-10-23T06:45:29.064378Z

Mise à jour

2026-10-23T07:15:02.488577730Z

Pile logicielle: system

Vérifiez votre serveur →