Red Hat Product Errata RHSA-2026:22147 - Security Advisory Issued: 2026-06-01 Updated: 2026-06-01 RHSA-2026:22147 - Security Advisory Overview Updated Packages Synopsis Low: qemu-kvm security update Type/Severity Security Advisory: Low Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for qemu-kvm is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x Fixes BZ - 2401209 - CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free CVEs CVE-2025-11234 References https://access.redhat.com/security/updates/classification/#low Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 SRPM qemu-kvm-6.2.0-11.el9_0.10.src.rpm SHA-256: 413d75ac25bfb3341c9b83e0181c3b10b5394fb34052ca222d1870c515e4f94f ppc64le qemu-guest-agent-6.2.0-11.el9_0.10.ppc64le.rpm SHA-256: 38e2fff863ff10e809871df5785f1d6b033b33970686ec35b4c4fbd979456c4e qemu-guest-agent-debuginfo-6.2.0-11.el9_0.10.ppc64le.rpm SHA-256: cfe8ea426fac84470f5b4a75bb2e898b6c153179815684205faa6dfff09abd29 qemu-img-6.2.0-11.el9_0.10.ppc64le.rpm SHA-256: 8139d94cf7e606d3242487e4002bd17bbf9919cd9598bf4ebb3defa3fcce7a93 qemu-img-debuginfo-6.2.0-11.el9_0.10.ppc64le.rpm SHA-256: 4a98b522b440b34477aa1c1489fa042276d551ba15b3dc9488ef7188c37c9c88 qemu-kvm-debuginfo-6.2.0-11.el9_0.10.ppc64le.rpm SHA-256: 614d790e7020db4ad75080e0fee660b1e4dbb9cd16421d3f6c88697dbd64d777 qemu-kvm-debugsource-6.2.0-11.el9_0.10.ppc64le.rpm SHA-256: 443fdd77b5a3b312d8243e55f9106a0934a816167958c38555278a2c1b5f0141 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 SRPM qemu-kvm-6.2.0-11.el9_0.10.src.rpm SHA-256: 413d75ac25bfb3341c9b83e0181c3b10b5394fb34052ca222d1870c515e4f94f x86_64 qemu-guest-agent-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 363e26bd856d40be483815309700d001bb3e34e4e103ca924b081b1d386d022b qemu-guest-agent-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 4367a807cdcb5692e89634245540f8655f5b7b9b5ac37a63ce7eba0bbb48ef66 qemu-img-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 793f647cbc486585bf9328c3d030743b41ff32c00425a0ed606dc56abadac7a5 qemu-img-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 3750d063b5720429e211d7f19a32a277dd007c4c9133cc962ceaba25be8edbb8 qemu-kvm-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 17c1673174d50229150a2fa3287e01504335724a70ef054fb55a8035ce219893 qemu-kvm-audio-pa-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: b9e0bbe2ab4451c9979bb8b80ad65d69b1bfdb03401c6a578fa2b47f2d2682f9 qemu-kvm-audio-pa-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: eef14f3293fb8f6bad0c1c662bae5b834b89ee5590ecb84b6b37329c580e016c qemu-kvm-block-curl-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 42a56ccbd81e25b035950c8ba68d92fcaeb3662b1087012acf5c3b1d8cf58f40 qemu-kvm-block-curl-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 0fa04772b36b429eb965e9314adb36265696dae0a61bcbddffde45dfb9d0c1ef qemu-kvm-block-rbd-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: cfa52291fa3e748d6b824d66944973357c8843ea68d641da9007170256d9ccd1 qemu-kvm-block-rbd-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: c3805a628264b18366491657b47003c2f68c13be2f98fb7eb80c23f85dfd922e qemu-kvm-block-ssh-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: efc828fcc038a2eb4aa1eb5e1c736ebe7fa1f5c6d8070bce3152a5de42fbe9c2 qemu-kvm-common-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: cfc0a5324c1f62bc5651dee464887e08df18793f19e139c0dca82177ea639b31 qemu-kvm-common-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: e996529fd56a5fa46e96c154ecc13b7d551cf26a9b64271190804fc9e847442e qemu-kvm-core-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 21b2f1d2aac5db77cccc421ac0c971d88b615c4abe060c8fc75c796d208328cf qemu-kvm-core-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 2f7054d7a6546b0887719cf9c8ab42609d63a6d964205da6fededddd2f79d295 qemu-kvm-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 89a1355a8deab888060c0f57ccad0dcb8845fbe8daa3c9dd7db217be89b254a0 qemu-kvm-debugsource-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: ae2f032717d8366ac53e3075f08757322bdab246c0c18e7713d818b9b15161d2 qemu-kvm-device-display-virtio-gpu-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: b2a25226a26be1b962fe8a816dbc27cbb1c1145472dfb3fbc442004b8f8f6c77 qemu-kvm-device-display-virtio-gpu-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: f69ac4418b0b27ae8062157d7ab64b82d0c9c1b58b88fc873c35784838fccce7 qemu-kvm-device-display-virtio-gpu-gl-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 40d41eb44d2134fa79b884d6806b0955b4615d2c15cb3d66a2df1d5aadb4810b qemu-kvm-device-display-virtio-gpu-gl-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: c186cabd154ae9bf977f8680a366a064513989edd6333bc7835fabba1ad647d9 qemu-kvm-device-display-virtio-gpu-pci-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: e83c0a31be0eb2c1e28f1430cffaf1e780a863029ab6920ecc83cc3b576539eb qemu-kvm-device-display-virtio-gpu-pci-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 2417d2c5498b5383a83c65961e06e1ea9a3516fbad4308ac2fcb35739ea81d10 qemu-kvm-device-display-virtio-gpu-pci-gl-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 0720c4dd47e940c9006739c4040daa32f5205ddc8578895ab0e90985b1d8176e qemu-kvm-device-display-virtio-gpu-pci-gl-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 96bd3415dabb368b5ebfd66db714a0f80b4dadf57c1995feb9e8f9b8dc3b0ee2 qemu-kvm-device-display-virtio-vga-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 739f4cd861aa0ffc015789424180a7800aab9d4e3f08ec5e11c73dd48036a8df qemu-kvm-device-display-virtio-vga-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: f58b52125d8e5c2121d6931afd99603401acf59301d6ef5f3290392778c0f12e qemu-kvm-device-display-virtio-vga-gl-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 25841c222581deca322f7ebca01157baf4f645ef9a7385539289e85c8ddc49a6 qemu-kvm-device-display-virtio-vga-gl-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 3091f78c0ae2e9726e82f665496f160375df5fb434723832c888ab0677be54d0 qemu-kvm-device-usb-host-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: eb10e51bd6c22c6b4275267ad1ddd88d0234878e0dde63e1f699f5ca82e66fef qemu-kvm-device-usb-host-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 897e500086d604fd0abf9e9b4e5a5f69d48d850dd9e553bf35bf016a3e5109dc qemu-kvm-device-usb-redirect-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: d6215a83c42e9e6326a579996a6b761468cd6bfc7e6c2db7c2c7e802e6094670 qemu-kvm-device-usb-redirect-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: f65e8b67dae2ee93739adaaeacc888f6ae79c329d6fff0287a474314dfdcea80 qemu-kvm-docs-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 5f504d3f9dd6bd88e19869f9150af68bb8006b940179bcc837a20d9267be8975 qemu-kvm-tests-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 317b2f7b68dcda86522a4089cfc270fce7ac58f2f2bc787a0a2f8f6d5fc1b2d4 qemu-kvm-tools-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 44b0862a726d6ec155fe722ab9729e41f99ececfb4f962e5dbcd409995a7ec1b qemu-kvm-tools-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 47faad7f63593e1aecc20bfe7f8f8ec3dc5385ec376134ccc129bbd139a4fe71 qemu-kvm-ui-egl-headless-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: dc19908bb7e852b48aa4e130b9c20fc5d425810cf60acb5519479ad2801869ea qemu-kvm-ui-egl-headless-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: aeb046193f00e7679c9705e5d20b8d1a2af0293a49ba2dabbd84dd0715e05d27 qemu-kvm-ui-opengl-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 683eb6b553952660faba8f8f88e0a92fa95148efe4a077494df027e1d9e475cb qemu-kvm-ui-opengl-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 13c9ef8da4925e55b31c00be2b01913c5f41864856422d5f69125909b6a28fec qemu-pr-helper-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: ed1b19d0220b5744e67f83f03bc629b5d9aad6a377c7d3fa3c30ad30894bc3ee qemu-pr-helper-debuginfo-6.2.0-11.el9_0.10.x86_64.rpm SHA-256: 034b8404368d7229bb3f84a8dfdceb5078ad9fb5dd95f1b72cb532d0c432a32a Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 SRPM qemu-kvm-6.2.0-11.el9_0.10.src.rpm SHA-256: 413d75ac25bfb3341c9b83e0181c3b10b5394fb34052ca222d1870c515e4f94f aarch64 qemu-guest-agent-6.2.0-11.el9_0.10.aarch64.rpm SHA-256: 4957953ad3f38e3f366e2da211f7cb3c02439884dafd06d7341fe6ed3e29db6e qemu-guest-agent-debuginfo-6.2.0-11.el9_0.10.aarch64.rpm SHA-256: 455260ff510714827797349f87feb1b637482a5ec84e53c14154f14e2b0b2031 qemu-img-6.2.0-11.el9_0.10.aarch64.rpm SHA-256: 7189ce536754f3b07392a3b85303b89e033b2be3ab32d4be205970984d41e44d qemu-img-debuginfo-6.2.0-11.el9_0.10.aarch64.rpm SHA-256: c12a6daf1fedb02204f9565549574b1ad59d43ef99624b438c74e2bd7ef65ecd qemu-kvm-6.2.0-11.el9_0.10.aarch64.rpm SHA-256: ec79b6dd7759ec766157161af01f1b736747ac157c9c79fbc3e6c371b8d70b30 qemu-kvm-audio-pa-6.2.0-11.el9_0.10.aarch64.rpm SHA-256: a98e56e962d335efba5d48f590f688342b68c7b73b7604880b314e651db8c6a4 qemu-kvm-audio-pa-debuginfo-6.2.0-11.el9_0.10.aarch64.rpm SHA-256: 55a021df0671a23d9e9a819b319f593800eb8d20866739edc21550ed64c5cf80 qemu-kvm-block-curl-6.2.0-11.el9_0.10.aarch64.rpm SH