Vulnerability-Lookup

ubuntu-cve-2026-0665

Vulnerability from osv_ubuntu

Published

2026-02-18 21:16

Modified

2026-03-05 12:28

Summary

Details

An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption.

Severity

6.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-0665	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-0665	REPORT
	https://lore.kernel.org/qemu-devel/13FE03BE60EA78…	REPORT
	https://ubuntu.com/security/notices/USN-8073-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-block-supplemental",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-data",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-gui",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-modules-opengl",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-modules-spice",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-x86-xen",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-xen",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:8.2.2+ds-0ubuntu1.13?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:8.2.2+ds-0ubuntu1.13"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.0.4+dfsg-1ubuntu3",
        "1:8.0.4+dfsg-1ubuntu4",
        "1:8.0.4+dfsg-1ubuntu5",
        "1:8.1.3+ds-1ubuntu2",
        "1:8.2.1+ds-1ubuntu1",
        "1:8.2.1+ds-1ubuntu8",
        "1:8.2.1+ds-1ubuntu9",
        "1:8.2.2+ds-0ubuntu1",
        "1:8.2.2+ds-0ubuntu1.2",
        "1:8.2.2+ds-0ubuntu1.4",
        "1:8.2.2+ds-0ubuntu1.5",
        "1:8.2.2+ds-0ubuntu1.6",
        "1:8.2.2+ds-0ubuntu1.7",
        "1:8.2.2+ds-0ubuntu1.8",
        "1:8.2.2+ds-0ubuntu1.9",
        "1:8.2.2+ds-0ubuntu1.10",
        "1:8.2.2+ds-0ubuntu1.11",
        "1:8.2.2+ds-0ubuntu1.12"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-block-supplemental",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-data",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-gui",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-modules-opengl",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-modules-spice",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-riscv",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-x86-xen",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-xen",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:10.1.0+ds-5ubuntu2.4?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.1.0+ds-5ubuntu2.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.2.1+ds-1ubuntu5",
        "1:10.0.2+ds-1ubuntu1",
        "1:10.0.2+ds-1ubuntu2",
        "1:10.1.0+ds-1ubuntu1",
        "1:10.1.0+ds-5ubuntu1",
        "1:10.1.0+ds-5ubuntu2",
        "1:10.1.0+ds-5ubuntu2.1",
        "1:10.1.0+ds-5ubuntu2.2"
      ]
    }
  ],
  "aliases": [],
  "details": "An off-by-one error was found in QEMU\u0027s KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption.",
  "id": "UBUNTU-CVE-2026-0665",
  "modified": "2026-03-05T12:28:43Z",
  "published": "2026-02-18T21:16:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-0665"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0665"
    },
    {
      "type": "REPORT",
      "url": "https://lore.kernel.org/qemu-devel/13FE03BE60EA78D6+20260109023548.4047-1-vr@darknavy.com/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8073-1"
    }
  ],
  "related": [
    "USN-8073-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-0665"
  ]
}

CVE-2026-0665 (GCVE-0-2026-0665)

Vulnerability from cvelistv5 – Published: 2026-02-18 20:50 – Updated: 2026-02-18 21:27

Title

Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-787 - Out-of-bounds Write

Assigner

fedora

References

2 references

URL	Tags
https://access.redhat.com/security/cve/CVE-2026-0665	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2428640	issue-trackingx_refsource_REDHAT

Impacted products

7 products

Vendor	Product	Version
		Affected: 8.0.0 , ≤ 10.2.0 (semver)
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Date Public

2026-01-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0665",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-18T21:26:51.744252Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-18T21:27:14.216Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.com/qemu-project/qemu",
          "defaultStatus": "unaffected",
          "packageName": "qemu",
          "versions": [
            {
              "lessThanOrEqual": "10.2.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "qemu-kvm",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "qemu-kvm",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "qemu-kvm",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "qemu-kvm-ma",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "virt:rhel/qemu-kvm",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "qemu-kvm",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-01-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An off-by-one error was found in QEMU\u0027s KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-18T20:50:03.724Z",
        "orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
        "shortName": "fedora"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-0665"
        },
        {
          "name": "RHBZ#2428640",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428640"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-01-12T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-01-09T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-787: Out-of-bounds Write"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
    "assignerShortName": "fedora",
    "cveId": "CVE-2026-0665",
    "datePublished": "2026-02-18T20:50:03.724Z",
    "dateReserved": "2026-01-07T12:09:11.643Z",
    "dateUpdated": "2026-02-18T21:27:14.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

usn-8073-1

Vulnerability from osv_ubuntu

Published

2026-03-04 16:13

Modified

2026-04-27 14:11

Summary

qemu vulnerabilities

Details

It was discovered that the UHCI controller implementation of QEMU could be brought into an invalid state. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2024-8354)

It was discovered that QEMU incorrectly handled memory during certain VNC operations. An remote attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-11234)

It was discovered that the e1000 network device implementation of QEMU could be made to write out of bounds. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-12464)

It was discovered that the virtio-crypto device implementation of QEMU did not limit the length of a certain path input. An attacker inside the guest could possibly use this issue to cause QEMU to consume large amount of memory, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-14876)

It was discovered that the KVM Xen guest support of QEMU could be made to read out of bounds. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-0665)

References

URL

Type

	https://ubuntu.com/security/notices/USN-8073-1	ADVISORY
	https://ubuntu.com/security/CVE-2024-8354	REPORT
	https://ubuntu.com/security/CVE-2025-11234	REPORT
	https://ubuntu.com/security/CVE-2025-12464	REPORT
	https://ubuntu.com/security/CVE-2025-14876	REPORT
	https://ubuntu.com/security/CVE-2026-0665	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-8354",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-11234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-data",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-gui",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-x86-microvm",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-system-x86-xen",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:6.2+dfsg-2ubuntu6.28"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:6.2+dfsg-2ubuntu6.28?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:6.2+dfsg-2ubuntu6.28"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:6.0+dfsg-2expubuntu1",
        "1:6.0+dfsg-2expubuntu2",
        "1:6.0+dfsg-2expubuntu4",
        "1:6.2+dfsg-2ubuntu5",
        "1:6.2+dfsg-2ubuntu6",
        "1:6.2+dfsg-2ubuntu6.1",
        "1:6.2+dfsg-2ubuntu6.2",
        "1:6.2+dfsg-2ubuntu6.3",
        "1:6.2+dfsg-2ubuntu6.4",
        "1:6.2+dfsg-2ubuntu6.5",
        "1:6.2+dfsg-2ubuntu6.6",
        "1:6.2+dfsg-2ubuntu6.7",
        "1:6.2+dfsg-2ubuntu6.8",
        "1:6.2+dfsg-2ubuntu6.9",
        "1:6.2+dfsg-2ubuntu6.10",
        "1:6.2+dfsg-2ubuntu6.11",
        "1:6.2+dfsg-2ubuntu6.12",
        "1:6.2+dfsg-2ubuntu6.13",
        "1:6.2+dfsg-2ubuntu6.14",
        "1:6.2+dfsg-2ubuntu6.15",
        "1:6.2+dfsg-2ubuntu6.16",
        "1:6.2+dfsg-2ubuntu6.17",
        "1:6.2+dfsg-2ubuntu6.18",
        "1:6.2+dfsg-2ubuntu6.19",
        "1:6.2+dfsg-2ubuntu6.21",
        "1:6.2+dfsg-2ubuntu6.22",
        "1:6.2+dfsg-2ubuntu6.23",
        "1:6.2+dfsg-2ubuntu6.24",
        "1:6.2+dfsg-2ubuntu6.25",
        "1:6.2+dfsg-2ubuntu6.26",
        "1:6.2+dfsg-2ubuntu6.27"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-8354",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-11234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-12464",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-14876",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-0665",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-block-supplemental",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-data",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-gui",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-modules-opengl",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-modules-spice",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-x86-xen",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-system-xen",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:8.2.2+ds-0ubuntu1.13"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:8.2.2+ds-0ubuntu1.13?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:8.2.2+ds-0ubuntu1.13"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.0.4+dfsg-1ubuntu3",
        "1:8.0.4+dfsg-1ubuntu4",
        "1:8.0.4+dfsg-1ubuntu5",
        "1:8.1.3+ds-1ubuntu2",
        "1:8.2.1+ds-1ubuntu1",
        "1:8.2.1+ds-1ubuntu8",
        "1:8.2.1+ds-1ubuntu9",
        "1:8.2.2+ds-0ubuntu1",
        "1:8.2.2+ds-0ubuntu1.2",
        "1:8.2.2+ds-0ubuntu1.4",
        "1:8.2.2+ds-0ubuntu1.5",
        "1:8.2.2+ds-0ubuntu1.6",
        "1:8.2.2+ds-0ubuntu1.7",
        "1:8.2.2+ds-0ubuntu1.8",
        "1:8.2.2+ds-0ubuntu1.9",
        "1:8.2.2+ds-0ubuntu1.10",
        "1:8.2.2+ds-0ubuntu1.11",
        "1:8.2.2+ds-0ubuntu1.12"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-8354",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-11234",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-12464",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-14876",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-0665",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:25.10"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-block-supplemental",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-data",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-gui",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-modules-opengl",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-modules-spice",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-riscv",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-x86-xen",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-system-xen",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:10.1.0+ds-5ubuntu2.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:10.1.0+ds-5ubuntu2.4?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.1.0+ds-5ubuntu2.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.2.1+ds-1ubuntu5",
        "1:10.0.2+ds-1ubuntu1",
        "1:10.0.2+ds-1ubuntu2",
        "1:10.1.0+ds-1ubuntu1",
        "1:10.1.0+ds-5ubuntu1",
        "1:10.1.0+ds-5ubuntu2",
        "1:10.1.0+ds-5ubuntu2.1",
        "1:10.1.0+ds-5ubuntu2.2"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that the UHCI controller implementation of QEMU could be\nbrought into an invalid state. An attacker inside the guest could possibly\nuse this issue to cause QEMU to crash, resulting in a denial of service.\n(CVE-2024-8354)\n\nIt was discovered that QEMU incorrectly handled memory during certain VNC\noperations. An remote attacker could possibly use this issue to cause QEMU\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2025-11234)\n\nIt was discovered that the e1000 network device implementation of QEMU\ncould be made to write out of bounds. An attacker inside the guest could\npossibly use this issue to cause QEMU to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. This issue only affected\nUbuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-12464)\n\nIt was discovered that the virtio-crypto device implementation of QEMU did\nnot limit the length of a certain path input. An attacker inside the guest\ncould possibly use this issue to cause QEMU to consume large amount of\nmemory, resulting in a denial of service. This issue only affected Ubuntu\n24.04 LTS and Ubuntu 25.10. (CVE-2025-14876)\n\nIt was discovered that the KVM Xen guest support of QEMU could be made to\nread out of bounds. An attacker inside the guest could possibly use this\nissue to cause QEMU to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-0665)",
  "id": "USN-8073-1",
  "modified": "2026-04-27T14:11:49Z",
  "published": "2026-03-04T16:13:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8073-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-8354"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-11234"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-12464"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-14876"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-0665"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "qemu vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2024-8354",
    "UBUNTU-CVE-2025-11234",
    "UBUNTU-CVE-2025-12464",
    "UBUNTU-CVE-2025-14876",
    "UBUNTU-CVE-2026-0665"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2026-0665

Vulnerability from osv_ubuntu

CVE-2026-0665 (GCVE-0-2026-0665)

usn-8073-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature