Red Hat Product Errata RHSA-2026:39311 - Security Advisory Issued: 2026-07-14 Updated: 2026-07-14 RHSA-2026:39311 - Security Advisory Overview Updated Packages Synopsis Low: qemu-kvm security update Type/Severity Security Advisory: Low Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for qemu-kvm is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2488283 - CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVEs CVE-2026-48914 References https://access.redhat.com/security/updates/classification/#low Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM qemu-kvm-10.1.0-17.el9_8.4.src.rpm SHA-256: da00287373d6d35bdb8e8a58b0659207bb9fa17d35d5c265b9d446e28f052e94 x86_64 qemu-guest-agent-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 75a2adbb21662926834ec96255bd74c34a8998fabd83c96acf28a0d7483de570 qemu-guest-agent-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: c396349e1fa64c4bb3d91a53ba20bb9ba69cf731cb2198014dd524bbca4cf93d qemu-img-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 572ff9bc393ae0fed8474a45a692dc679e30db7264315e65b06e102b05349ca2 qemu-img-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: bd114a65cd0c265598e69a0bd5fffbcd50e44ff83c1fd628a43a470b64bda841 qemu-kvm-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 48110956a0ce85289ef813e7f2d775e8514436981d28e0ef301d4134c0f89b85 qemu-kvm-audio-dbus-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 4add197591f2311c0952f73c4769bf0f7c3be113c0860c4bf7dab075581f8a1d qemu-kvm-audio-pa-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: c1d1b2175b5e512f8a2f79aea8f2243da6c987449035e864ba37734ba4e6ae4d qemu-kvm-audio-pa-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: a5119bdef6c40e3d66ba042b9fe946efa22025c2c2f61913c98d1ee5a0dbdf6a qemu-kvm-block-blkio-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 5ebe0d7f3dd1647fabe799d4ed7a64a7c4837e04f58b449e85f209218ef6051c qemu-kvm-block-blkio-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 75a8c818c078eb2a1e2063b869c1abbfcffb3c0e7927ae2283c1da3ba87aa055 qemu-kvm-block-curl-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 2f26cba21d0f415676b5aa5d1f35b76171d52d847d0075bb12325a4c88301b79 qemu-kvm-block-curl-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 644a0c9e8f04d66c18737638d30d9c84b6fd79c25414eb6ef755a187db635255 qemu-kvm-block-rbd-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: a0ab2cc945c77ca1fd7b2fa159a70fdc126b7cc50014b50400021d4162d8e501 qemu-kvm-block-rbd-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: ecee36bb39c4b9c04551b35236fdcb13efa35f508eb1902678f79968616d5660 qemu-kvm-common-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: bdf559b87dfc81dda887675b87f1219ca9a1e4a0bb49f122f0857a4ae208edee qemu-kvm-common-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: a01b1c24d02a260127c80da6f222a86ffd1ed54e37ad45b89586eaf7dc5237bc qemu-kvm-core-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 97a0c05d9066546063964325816cb2e39f87040a1b2a21fd60617ad47ae3bc1d qemu-kvm-core-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 5e192c623291a3f6b1a8ea189f00c62110df35c71b1f46fa75947a4029527c94 qemu-kvm-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 71ded4decf02aa95aac35674450377340370362bed45f45a370dd65b87474ece qemu-kvm-debugsource-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: ca45bd3171ac002e30d11f9231b9661cc0cc6e7b3af4acf2219f7b159e87acbb qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: f38e4cefd108248a272b065ab74313a51b9ce31b55f2dc623a9099c19fb3e6a0 qemu-kvm-device-display-virtio-gpu-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: cddfff86fda4cd986412269dbe37592db245d10ab1ed8309e4fd8969a302b3eb qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 05233c592aedebb7094e80f31558fd6d10b3d8cac5995eca5419f3723b203270 qemu-kvm-device-display-virtio-gpu-pci-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: f6afb921ff1fc90dfd57c81cd39adb7a724a9127bcf07ba420eaab4e053294d9 qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: cf02694e1e9bdf92f01028b89287143a3c82678a6a32df71b29d68860a328d42 qemu-kvm-device-display-virtio-vga-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 63a440c5fab83cbd16b1f56c46499bf458a3221a50d779aba09e20893684d628 qemu-kvm-device-usb-host-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: bb6b8323c39f945921a1f7f0489268600e3d4a10a0acabb0dbe683e50a890e41 qemu-kvm-device-usb-host-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: d134141a091bb55eec1ac57760000f08875875969bc09efbcb7180fa12a5cf35 qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 8945cee555b002359ca576af68f5d87e03b0739d3ccd70986d036f53ffabc6e6 qemu-kvm-device-usb-redirect-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 3d46e3c79dd08c2c61ce13a3d3b993884b2c975ef6dfa432facc04a9cd9a1c1a qemu-kvm-docs-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: a46a02089e7beeaab76e0caec0659a0d117baae226bc71905902779680076309 qemu-kvm-tests-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: d14fe6e4e6ef096424dc1fdbf84762298267a66bcfd56958c9946860a34917a5 qemu-kvm-tools-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: a72d6d22af34f847404b6b90eb164dc12fe59f97b7e34fab47beb1f579a9d52b qemu-kvm-tools-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: bb6df1e6e01fd3d077e3ed79b8d8297af343746b1460c37616ef8fb2a2c738b0 qemu-kvm-ui-dbus-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: aeccc479bc0fd1c1195481b30a6cf5cfb0dfa35c218b42b0550fa6cebda53467 qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 3a43c221c89a05bf7801eab5eb4c8ee16b5d2a3077d3b5dcb8f76249e40dda79 qemu-kvm-ui-egl-headless-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 4189491f8160439c8612535c85790fd1942bb5bbbe6b75f03dd8a21e1afdc631 qemu-kvm-ui-opengl-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: ee82f4c7dc2faaf47805a02fa90a17a4a7b4d45023c8bba38f7d9886cfb577ec qemu-kvm-ui-opengl-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: fc4241694a214a6fc3bd8f037590bb92176cf0d8775c183a556c07f30eea6411 qemu-pr-helper-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: b2ea7dfeaf765c1629839327710b632956597b5895bf9c5a1a34d7132d2c6194 qemu-pr-helper-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: b7db5a5db78475f10f960f64b96e6d103c3b5b271bc72f8d83b147e543c988ac Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM qemu-kvm-10.1.0-17.el9_8.4.src.rpm SHA-256: da00287373d6d35bdb8e8a58b0659207bb9fa17d35d5c265b9d446e28f052e94 x86_64 qemu-guest-agent-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 75a2adbb21662926834ec96255bd74c34a8998fabd83c96acf28a0d7483de570 qemu-guest-agent-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: c396349e1fa64c4bb3d91a53ba20bb9ba69cf731cb2198014dd524bbca4cf93d qemu-img-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 572ff9bc393ae0fed8474a45a692dc679e30db7264315e65b06e102b05349ca2 qemu-img-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: bd114a65cd0c265598e69a0bd5fffbcd50e44ff83c1fd628a43a470b64bda841 qemu-kvm-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 48110956a0ce85289ef813e7f2d775e8514436981d28e0ef301d4134c0f89b85 qemu-kvm-audio-dbus-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 4add197591f2311c0952f73c4769bf0f7c3be113c0860c4bf7dab075581f8a1d qemu-kvm-audio-pa-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: c1d1b2175b5e512f8a2f79aea8f2243da6c987449035e864ba37734ba4e6ae4d qemu-kvm-audio-pa-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: a5119bdef6c40e3d66ba042b9fe946efa22025c2c2f61913c98d1ee5a0dbdf6a qemu-kvm-block-blkio-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 5ebe0d7f3dd1647fabe799d4ed7a64a7c4837e04f58b449e85f209218ef6051c qemu-kvm-block-blkio-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 75a8c818c078eb2a1e2063b869c1abbfcffb3c0e7927ae2283c1da3ba87aa055 qemu-kvm-block-curl-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 2f26cba21d0f415676b5aa5d1f35b76171d52d847d0075bb12325a4c88301b79 qemu-kvm-block-curl-debuginfo-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: 644a0c9e8f04d66c18737638d30d9c84b6fd79c25414eb6ef755a187db635255 qemu-kvm-block-rbd-10.1.0-17.el9_8.4.x86_64.rpm SHA-256: a0ab2cc945c77