According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read     vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service     condition (DoS).(CVE-2026-2243)

    A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a     missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a     denial of service (DoS) on the host system by causing the QEMU process to terminate     unexpectedly.(CVE-2025-14876)

    A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a     handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-     free in the use of the channel. This can be abused by a malicious client with network access to the VNC     WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client     authentication.(CVE-2025-11234)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization qemu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2406-1 advisory.

    - CVE-2023-1544: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read() (bsc#1209554).
    - CVE-2025-11234: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service     (bsc#1250984).
    - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak     when processing       specially crafted VMDK files (bsc#1258509).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23228 advisory.

    Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm packages provide the user-space component for running virtual machines that     use KVM.

    Security Fix(es):

    * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:5578 advisory.

    * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3165 advisory.

    Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm packages provide the user-space component for running virtual machines that     use KVM.

    Security Fix(es):

    * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50118 advisory.

    - Limit recursion in ri-records (CVE-2021-3622)       resolves: rhbz#1976194
    - Bounds check for block exceeding page length (CVE-2021-3504)       resolves: rhbz#1950501
    - Fixes: CVE-2022-40284
    - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,       CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789       resolves: rhbz#2127240 rhbz#2127248       (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)
    - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,       CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,       CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254       resolves: rhbz#2004490
    - Fix for CVE-2019-9755       (heap-based buffer overflow leads to local root privilege escalation)       resolves: rhbz#1698503
    - Fix CVE-2024-7383 NBD server improper certificate validation       resolves: RHEL-52728
    - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails       resolves: rhbz#2045718
    - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
    - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018)       Resolves: rhbz#2173964       Resolves: rhbz#2173970
    - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets       Resolves: rhbz#1999307
    - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM       Fixes: rhbz#1976816
    - rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrange) [Orabug: 36821472]     {CVE-2024-4418}
    - Fix CVE-2021-3716 NBD_OPT_STRUCTURED_REPLY injection on STARTTLS       resolves: rhbz#1994915
    - io: fix use after free in websocket handshake code (Daniel P. Berrange) [Orabug: 38687831]     {CVE-2025-11234}
    - hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint (Peter Maydell) [Orabug: 37517799]     {CVE-2024-8354}
    - target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350}     {CVE-2024-36357}
    - Add fix for CVE-2022-23645.
      Resolves: rhbz#2056517
    - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
      Resolves: rhbz#1906043
    - Fix CVE-2022-2211 Denial of Service in --key parameter       resolves: rhbz#2102720

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18772 advisory.

    [10.1.0-17]
    - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
    - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
    - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
    - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
    - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
    - Resolves: RHEL-155947       (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
    - Resolves: RHEL-155948       (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
    - Resolves: RHEL-154174       (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication     of ENOSPC [rhel-9.8])

    [10.1.0-16]
    - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
    - Resolves: RHEL-151679       ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc'     due to event rate limiting)

    [10.1.0-15]
    - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
    - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
    - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
    - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
    - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
    - Resolves: RHEL-149396       (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])

    [10.1.0-14]
    - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
    - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
    - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
    - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
    - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
    - Resolves: RHEL-67115       ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue     enabled[rhel9.6])

    [10.1.0-13]
    - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
    - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
    - Resolves: RHEL-147422       (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
    - Resolves: RHEL-130620       (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])

    [10.1.0-12]
    - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
    - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
    - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
    - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
    - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
    - kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
    - Resolves: RHEL-132989       (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
    - Resolves: RHEL-140187       (Intel IOMMU VM freezes: 'call_irq_handler: 3.37 No irq handler for vector'[rhel-9.8])
    - Resolves: RHEL-139057       ([qemu, rhel-9] increase default TSEG size)

    [10.1.0-11]
    - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
    - Resolves: RHEL-138240       (QEMU crashes when stopping source VM during live migration [rhel-9])

    [10.1.0-10]
    - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
    - Resolves: RHEL-132193       ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)

    [10.1.0-9]
    - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
    - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
    - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
    - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
    - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
    - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
    - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
    - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
    - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
    - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
    - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
    - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
    - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
    - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
    - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
    - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
    - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
    - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
    - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
    - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
    - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
    - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
    - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
    - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
    - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
    - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
    - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
    - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
    - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
    - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
    - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
    - Resolves: RHEL-131144       (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
    - Resolves: RHEL-132193       ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)

    [10.1.0-8]
    - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-133303]
    - Resolves: RHEL-133303       (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device [rhel-9])

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
319435	EulerOS Virtualization 2.13.1 : qemu (EulerOS-SA-2026-2156)	Nessus	Huawei Local Security Checks	2026/6/6	2026/6/6	medium
321752	SUSE SLES12 Security Update : qemu (SUSE-SU-2026:2406-1)	Nessus	SuSE Local Security Checks	2026/6/20	2026/6/20	medium
278988	RHEL 9 : qemu-kvm (RHSA-2025:23228)	Nessus	Red Hat Local Security Checks	2025/12/17	2025/12/17	high
303431	RockyLinux 8 : virt:rhel and virt-devel:rhel (RLSA-2026:5578)	Nessus	Rocky Linux Local Security Checks	2026/3/24	2026/3/31	high
299856	RHEL 9 : qemu-kvm (RHSA-2026:3165)	Nessus	Red Hat Local Security Checks	2026/2/24	2026/2/24	high
299967	Oracle Linux 8 : virt:kvm_utils3 (ELSA-2026-50118)	Nessus	Oracle Linux Local Security Checks	2026/2/25	2026/2/25	medium
322195	Oracle Linux 9 : qemu-kvm (ELSA-2026-18772)	Nessus	Oracle Linux Local Security Checks	2026/6/23	2026/6/23	high

检测

插件搜索

medium

medium

high

high

high

medium

high