Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:20038-1 Final 1 1 2026-01-06T11:41:24Z current 2026-01-06T11:41:24Z 2026-01-06T11:41:24Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Update to version 8.2.10. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-2025-11234: use-after-free in WebSocket handshake operations can be exploited by a malicious client with network access to the VNC WebSocket port to cause a denial-of-service (bsc#1250984). Other updates and bugfixes: - [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too. - [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286). - block/curl: fix curl internal handles handling (bsc#1252768). - [openSUSE][RPM]: spec: qemu-vgabios is required on ppc (bsc#1230042). - [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566). - [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157). - [openSUSE][RPM]: disable LTO for userspace emulation on 15.6 (bsc#1243013). - Version 8.2.10 changes: * Full changelog: https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/ * Some backports: - hw/misc/aspeed_hace: Fix buffer overflow in has_padding function - target/ppc: Fix e200 duplicate SPRs - linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall - docs/about/emulation: Fix broken link - vdpa: Allow vDPA to work on big-endian machine - vdpa: Fix endian bugs in shadow virtqueue - target/loongarch: Fix vldi inst - target/arm: Simplify pstate_sm check in sve_access_check - target/arm: Make DisasContext.{fp, sve}_access_checked tristate - util/cacheflush: Make first DSB unconditional on aarch64 - ui/cocoa: Temporarily ignore annoying deprecated declaration warnings - docs: Rename default-configs to configs - block: Zero block driver state before reopening - hw/xen/hvm: Fix Aarch64 typo - hw/net/smc91c111: Don't allow data register access to overrun buffer - hw/net/smc91c111: Sanitize packet length on tx - hw/net/smc91c111: Sanitize packet numbers - hw/net/smc91c111: Ignore attempt to pop from empty RX fifo - ppc/pnv/occ: Fix common area sensor offsets - net: move backend cleanup to NIC cleanup - net: parameterize the removing client from nc list - util/qemu-timer.c: Don't warp timer from timerlist_rearm() - target/arm: Correct STRD atomicity - target/arm: Correct LDRD atomicity and fault behaviour The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Micro-6.0-545 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-202620038-1/ Link for SUSE-SU-2026:20038-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023769.html E-Mail link for SUSE-SU-2026:20038-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1230042 SUSE Bug 1230042 https://bugzilla.suse.com/1240157 SUSE Bug 1240157 https://bugzilla.suse.com/1243013 SUSE Bug 1243013 https://bugzilla.suse.com/1246566 SUSE Bug 1246566 https://bugzilla.suse.com/1250984 SUSE Bug 1250984 https://bugzilla.suse.com/1252768 SUSE Bug 1252768 https://bugzilla.suse.com/1253002 SUSE Bug 1253002 https://bugzilla.suse.com/1254286 SUSE Bug 1254286 https://www.suse.com/security/cve/CVE-2025-11234/ SUSE CVE CVE-2025-11234 page https://www.suse.com/security/cve/CVE-2025-12464/ SUSE CVE CVE-2025-12464 page SUSE Linux Micro 6.0 qemu-8.2.10-1.1 qemu-accel-tcg-x86-8.2.10-1.1 qemu-arm-8.2.10-1.1 qemu-audio-spice-8.2.10-1.1 qemu-block-curl-8.2.10-1.1 qemu-block-iscsi-8.2.10-1.1 qemu-block-rbd-8.2.10-1.1 qemu-block-ssh-8.2.10-1.1 qemu-chardev-spice-8.2.10-1.1 qemu-guest-agent-8.2.10-1.1 qemu-hw-display-qxl-8.2.10-1.1 qemu-hw-display-virtio-gpu-8.2.10-1.1 qemu-hw-display-virtio-gpu-pci-8.2.10-1.1 qemu-hw-display-virtio-vga-8.2.10-1.1 qemu-hw-usb-host-8.2.10-1.1 qemu-hw-usb-redirect-8.2.10-1.1 qemu-img-8.2.10-1.1 qemu-ipxe-8.2.10-1.1 qemu-ksm-8.2.10-1.1 qemu-lang-8.2.10-1.1 qemu-pr-helper-8.2.10-1.1 qemu-s390x-8.2.10-1.1 qemu-seabios-8.2.101.16.3_3_ga95067eb-1.1 qemu-tools-8.2.10-1.1 qemu-ui-opengl-8.2.10-1.1 qemu-ui-spice-core-8.2.10-1.1 qemu-vgabios-8.2.101.16.3_3_ga95067eb-1.1 qemu-x86-8.2.10-1.1 qemu-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-accel-tcg-x86-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-arm-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-audio-spice-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-block-curl-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-block-iscsi-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-block-rbd-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-block-ssh-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-chardev-spice-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-guest-agent-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-hw-display-qxl-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-hw-display-virtio-gpu-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-hw-display-virtio-gpu-pci-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-hw-display-virtio-vga-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-hw-usb-host-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-hw-usb-redirect-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-img-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-ipxe-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-ksm-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-lang-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-pr-helper-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-s390x-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-seabios-8.2.101.16.3_3_ga95067eb-1.1 as a component of SUSE Linux Micro 6.0 qemu-tools-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-ui-opengl-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-ui-spice-core-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 qemu-vgabios-8.2.101.16.3_3_ga95067eb-1.1 as a component of SUSE Linux Micro 6.0 qemu-x86-8.2.10-1.1 as a component of SUSE Linux Micro 6.0 A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication. CVE-2025-11234 SUSE Linux Micro 6.0:qemu-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-accel-tcg-x86-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-arm-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-audio-spice-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-curl-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-iscsi-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-rbd-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-ssh-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-chardev-spice-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-guest-agent-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-qxl-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-virtio-gpu-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-virtio-gpu-pci-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-virtio-vga-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-usb-host-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-usb-redirect-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-img-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ipxe-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ksm-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-lang-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-pr-helper-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-s390x-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-seabios-8.2.101.16.3_3_ga95067eb-1.1 SUSE Linux Micro 6.0:qemu-tools-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ui-opengl-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ui-spice-core-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-vgabios-8.2.101.16.3_3_ga95067eb-1.1 SUSE Linux Micro 6.0:qemu-x86-8.2.10-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-202620038-1/ https://www.suse.com/security/cve/CVE-2025-11234.html CVE-2025-11234 https://bugzilla.suse.com/1250984 SUSE Bug 1250984 A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This could lead to a buffer overrun in the e1000_receive_iov() function via the loopback code path. A malicious guest user could use this vulnerability to crash the QEMU process on the host, resulting in a denial of service. CVE-2025-12464 SUSE Linux Micro 6.0:qemu-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-accel-tcg-x86-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-arm-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-audio-spice-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-curl-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-iscsi-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-rbd-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-block-ssh-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-chardev-spice-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-guest-agent-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-qxl-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-virtio-gpu-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-virtio-gpu-pci-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-display-virtio-vga-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-usb-host-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-hw-usb-redirect-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-img-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ipxe-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ksm-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-lang-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-pr-helper-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-s390x-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-seabios-8.2.101.16.3_3_ga95067eb-1.1 SUSE Linux Micro 6.0:qemu-tools-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ui-opengl-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-ui-spice-core-8.2.10-1.1 SUSE Linux Micro 6.0:qemu-vgabios-8.2.101.16.3_3_ga95067eb-1.1 SUSE Linux Micro 6.0:qemu-x86-8.2.10-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-202620038-1/ https://www.suse.com/security/cve/CVE-2025-12464.html CVE-2025-12464 https://bugzilla.suse.com/1253002 SUSE Bug 1253002