Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0662-1 Final 1 1 2026-02-26T15:12:26Z current 2026-02-26T15:12:26Z 2026-02-26T15:12:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). - CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption (bsc#1256484). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2026-662,openSUSE-SLE-15.6-2026-662 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260662-1/ Link for SUSE-SU-2026:0662-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024448.html E-Mail link for SUSE-SU-2026:0662-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1255400 SUSE Bug 1255400 https://bugzilla.suse.com/1256484 SUSE Bug 1256484 https://www.suse.com/security/cve/CVE-2025-14876/ SUSE CVE CVE-2025-14876 page https://www.suse.com/security/cve/CVE-2026-0665/ SUSE CVE CVE-2026-0665 page openSUSE Leap 15.6 qemu-8.2.10-150600.3.46.1 qemu-SLOF-8.2.10-150600.3.46.1 qemu-accel-qtest-8.2.10-150600.3.46.1 qemu-accel-tcg-x86-8.2.10-150600.3.46.1 qemu-arm-8.2.10-150600.3.46.1 qemu-audio-alsa-8.2.10-150600.3.46.1 qemu-audio-dbus-8.2.10-150600.3.46.1 qemu-audio-jack-8.2.10-150600.3.46.1 qemu-audio-oss-8.2.10-150600.3.46.1 qemu-audio-pa-8.2.10-150600.3.46.1 qemu-audio-pipewire-8.2.10-150600.3.46.1 qemu-audio-spice-8.2.10-150600.3.46.1 qemu-block-curl-8.2.10-150600.3.46.1 qemu-block-dmg-8.2.10-150600.3.46.1 qemu-block-gluster-8.2.10-150600.3.46.1 qemu-block-iscsi-8.2.10-150600.3.46.1 qemu-block-nfs-8.2.10-150600.3.46.1 qemu-block-rbd-8.2.10-150600.3.46.1 qemu-block-ssh-8.2.10-150600.3.46.1 qemu-chardev-baum-8.2.10-150600.3.46.1 qemu-chardev-spice-8.2.10-150600.3.46.1 qemu-doc-8.2.10-150600.3.46.1 qemu-extra-8.2.10-150600.3.46.1 qemu-guest-agent-8.2.10-150600.3.46.1 qemu-headless-8.2.10-150600.3.46.1 qemu-hw-display-qxl-8.2.10-150600.3.46.1 qemu-hw-display-virtio-gpu-8.2.10-150600.3.46.1 qemu-hw-display-virtio-gpu-pci-8.2.10-150600.3.46.1 qemu-hw-display-virtio-vga-8.2.10-150600.3.46.1 qemu-hw-s390x-virtio-gpu-ccw-8.2.10-150600.3.46.1 qemu-hw-usb-host-8.2.10-150600.3.46.1 qemu-hw-usb-redirect-8.2.10-150600.3.46.1 qemu-hw-usb-smartcard-8.2.10-150600.3.46.1 qemu-img-8.2.10-150600.3.46.1 qemu-ipxe-8.2.10-150600.3.46.1 qemu-ivshmem-tools-8.2.10-150600.3.46.1 qemu-ksm-8.2.10-150600.3.46.1 qemu-lang-8.2.10-150600.3.46.1 qemu-linux-user-8.2.10-150600.3.46.1 qemu-microvm-8.2.10-150600.3.46.1 qemu-ppc-8.2.10-150600.3.46.1 qemu-pr-helper-8.2.10-150600.3.46.1 qemu-s390x-8.2.10-150600.3.46.1 qemu-seabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 qemu-skiboot-8.2.10-150600.3.46.1 qemu-spice-8.2.10-150600.3.46.1 qemu-tools-8.2.10-150600.3.46.1 qemu-ui-curses-8.2.10-150600.3.46.1 qemu-ui-dbus-8.2.10-150600.3.46.1 qemu-ui-gtk-8.2.10-150600.3.46.1 qemu-ui-opengl-8.2.10-150600.3.46.1 qemu-ui-spice-app-8.2.10-150600.3.46.1 qemu-ui-spice-core-8.2.10-150600.3.46.1 qemu-vgabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 qemu-vhost-user-gpu-8.2.10-150600.3.46.1 qemu-x86-8.2.10-150600.3.46.1 qemu-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-SLOF-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-accel-qtest-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-accel-tcg-x86-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-arm-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-audio-alsa-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-audio-dbus-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-audio-jack-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-audio-pa-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-audio-pipewire-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-audio-spice-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-block-curl-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-block-dmg-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-block-gluster-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-block-iscsi-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-block-nfs-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-block-rbd-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-block-ssh-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-chardev-baum-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-chardev-spice-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-doc-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-extra-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-guest-agent-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-headless-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-display-qxl-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-display-virtio-gpu-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-display-virtio-gpu-pci-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-display-virtio-vga-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-s390x-virtio-gpu-ccw-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-usb-host-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-usb-redirect-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-hw-usb-smartcard-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-img-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ipxe-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ivshmem-tools-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ksm-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-lang-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-linux-user-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-microvm-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ppc-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-pr-helper-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-s390x-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-seabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-skiboot-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-spice-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-tools-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ui-curses-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ui-dbus-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ui-gtk-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ui-opengl-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ui-spice-app-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-ui-spice-core-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-vgabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-vhost-user-gpu-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 qemu-x86-8.2.10-150600.3.46.1 as a component of openSUSE Leap 15.6 A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly. CVE-2025-14876 openSUSE Leap 15.6:qemu-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-SLOF-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-accel-qtest-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-accel-tcg-x86-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-arm-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-alsa-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-dbus-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-jack-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-pa-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-pipewire-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-spice-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-curl-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-dmg-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-gluster-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-iscsi-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-nfs-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-rbd-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-ssh-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-chardev-baum-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-chardev-spice-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-doc-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-extra-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-guest-agent-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-headless-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-qxl-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-pci-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-virtio-vga-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-s390x-virtio-gpu-ccw-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-usb-host-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-usb-redirect-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-usb-smartcard-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-img-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ipxe-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ivshmem-tools-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ksm-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-lang-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-linux-user-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-microvm-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ppc-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-pr-helper-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-s390x-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-seabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 openSUSE Leap 15.6:qemu-skiboot-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-spice-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-tools-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-curses-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-dbus-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-gtk-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-opengl-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-spice-app-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-spice-core-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-vgabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 openSUSE Leap 15.6:qemu-vhost-user-gpu-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-x86-8.2.10-150600.3.46.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260662-1/ https://www.suse.com/security/cve/CVE-2025-14876.html CVE-2025-14876 https://bugzilla.suse.com/1255400 SUSE Bug 1255400 An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption. CVE-2026-0665 openSUSE Leap 15.6:qemu-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-SLOF-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-accel-qtest-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-accel-tcg-x86-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-arm-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-alsa-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-dbus-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-jack-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-pa-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-pipewire-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-audio-spice-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-curl-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-dmg-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-gluster-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-iscsi-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-nfs-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-rbd-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-block-ssh-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-chardev-baum-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-chardev-spice-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-doc-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-extra-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-guest-agent-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-headless-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-qxl-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-pci-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-display-virtio-vga-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-s390x-virtio-gpu-ccw-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-usb-host-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-usb-redirect-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-hw-usb-smartcard-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-img-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ipxe-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ivshmem-tools-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ksm-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-lang-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-linux-user-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-microvm-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ppc-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-pr-helper-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-s390x-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-seabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 openSUSE Leap 15.6:qemu-skiboot-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-spice-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-tools-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-curses-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-dbus-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-gtk-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-opengl-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-spice-app-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-ui-spice-core-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-vgabios-8.2.101.16.3_3_ga95067eb-150600.3.46.1 openSUSE Leap 15.6:qemu-vhost-user-gpu-8.2.10-150600.3.46.1 openSUSE Leap 15.6:qemu-x86-8.2.10-150600.3.46.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260662-1/ https://www.suse.com/security/cve/CVE-2026-0665.html CVE-2026-0665 https://bugzilla.suse.com/1256484 SUSE Bug 1256484