Vulnerability · Published Oct 3, 2025 · Assigned by redhat

CVE-2025-11234Qemu-kvm: vnc websocket handshake use-after-free

High 7.5

In plain English

A high-severity use-after-free in qemu. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.9%top 41.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	SLOF	20210217-2.module_el8.10.0+3768+dfd76e10	ALSA-2026:5578
AlmaLinux:8	hivex	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	hivex	1.3.18-23.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	hivex-devel	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	hivex-devel	1.3.18-23.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	libguestfs	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-appliance	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-bash-completion	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-devel	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-gfs2	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-gobject	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-gobject-devel	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-inspect-icons	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-java	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-java-devel	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-javadoc	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-man-pages-ja	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-man-pages-uk	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-rescue	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-rsync	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-tools	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-tools-c	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libguestfs-winsupport	8.10-1.module_el8.10.0+3768+dfd76e10	ALSA-2026:5578
AlmaLinux:8	libguestfs-xfs	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	libiscsi	1.18.0-8.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	libiscsi	1.18.0-8.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	libiscsi-devel	1.18.0-8.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	libiscsi-devel	1.18.0-8.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	libiscsi-utils	1.18.0-8.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	libiscsi-utils	1.18.0-8.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	libnbd	1.6.0-6.module_el8.10.0+3897+eb84924d	ALSA-2026:5578
AlmaLinux:8	libnbd-bash-completion	1.6.0-6.module_el8.10.0+3897+eb84924d	ALSA-2026:5578
AlmaLinux:8	libnbd-devel	1.6.0-6.module_el8.10.0+3897+eb84924d	ALSA-2026:5578
AlmaLinux:8	libtpms	0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libtpms-devel	0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-client	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-config-network	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-config-nwfilter	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-interface	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-network	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-nodedev	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-nwfilter	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-qemu	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-secret	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-core	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-disk	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-gluster	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-iscsi	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-iscsi-direct	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-logical	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-mpath	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-rbd	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-driver-storage-scsi	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-daemon-kvm	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-dbus	1.3.0-2.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	libvirt-dbus	1.3.0-2.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	libvirt-devel	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-docs	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-libs	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-lock-sanlock	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-nss	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	libvirt-wireshark	8.0.0-23.4.module_el8.10.0+4031+06966654	ALSA-2026:5578
AlmaLinux:8	lua-guestfs	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	nbdfuse	1.6.0-6.module_el8.10.0+3897+eb84924d	ALSA-2026:5578
AlmaLinux:8	nbdkit	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-bash-completion	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-basic-filters	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-basic-plugins	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-curl-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-devel	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-example-plugins	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-gzip-filter	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-gzip-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-linuxdisk-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-nbd-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-python-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-server	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-ssh-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-tar-filter	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-tar-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-tmpdisk-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-vddk-plugin	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	nbdkit-xz-filter	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2026:5578
AlmaLinux:8	netcf	0.2.8-12.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	netcf	0.2.8-12.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	netcf-devel	0.2.8-12.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	netcf-devel	0.2.8-12.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	netcf-libs	0.2.8-12.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	netcf-libs	0.2.8-12.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	ocaml-hivex	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	ocaml-hivex	1.3.18-23.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	ocaml-hivex-devel	1.3.18-23.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	ocaml-hivex-devel	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	ocaml-libguestfs	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	ocaml-libguestfs-devel	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	ocaml-libnbd	1.6.0-6.module_el8.10.0+3897+eb84924d	ALSA-2026:5578
AlmaLinux:8	ocaml-libnbd-devel	1.6.0-6.module_el8.10.0+3897+eb84924d	ALSA-2026:5578
AlmaLinux:8	perl-Sys-Guestfs	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	perl-Sys-Virt	8.0.0-1.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	perl-Sys-Virt	8.0.0-1.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	perl-hivex	1.3.18-23.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	perl-hivex	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	python3-hivex	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	python3-hivex	1.3.18-23.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	python3-libguestfs	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	python3-libnbd	1.6.0-6.module_el8.10.0+3897+eb84924d	ALSA-2026:5578
AlmaLinux:8	python3-libvirt	8.0.0-2.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:10	qemu-guest-agent	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-guest-agent	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-guest-agent	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-img	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-img	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-img	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-kvm	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-kvm	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-audio-pa	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-audio-pa	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-block-blkio	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-block-blkio	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-block-curl	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-kvm-block-curl	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-kvm-block-curl	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:8	qemu-kvm-block-gluster	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:8	qemu-kvm-block-iscsi	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:10	qemu-kvm-block-rbd	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-kvm-block-rbd	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-kvm-block-rbd	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:8	qemu-kvm-block-ssh	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:10	qemu-kvm-common	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-kvm-common	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-kvm-common	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-core	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-kvm-core	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-kvm-core	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-device-display-virtio-gpu	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-device-display-virtio-gpu	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-device-display-virtio-gpu-ccw	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-device-display-virtio-gpu-ccw	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-device-display-virtio-gpu-pci	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-device-display-virtio-gpu-pci	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-device-display-virtio-vga	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-device-display-virtio-vga	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-device-usb-host	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-device-usb-host	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-device-usb-redirect	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-device-usb-redirect	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-docs	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-kvm-docs	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-kvm-docs	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:8	qemu-kvm-hw-usbredir	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:8	qemu-kvm-tests	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:10	qemu-kvm-tools	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-tools	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-ui-egl-headless	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-kvm-ui-egl-headless	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:10	qemu-kvm-ui-opengl	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:8	qemu-kvm-ui-opengl	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:9	qemu-kvm-ui-opengl	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:8	qemu-kvm-ui-spice	15:6.2.0-53.module_el8.10.0+4110+4a319788.6	ALSA-2026:5578
AlmaLinux:10	qemu-pr-helper	18:10.0.0-14.el10_1.5.alma.1	ALSA-2026:1831
AlmaLinux:9	qemu-pr-helper	17:10.1.0-17.el9_8.alma.1	ALSA-2026:18772
AlmaLinux:8	ruby-hivex	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	ruby-hivex	1.3.18-23.module_el8.6.0+3161+a07c0ea5	ALSA-2026:5578
AlmaLinux:8	ruby-libguestfs	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	seabios	1.16.0-4.module_el8.9.0+3659+9c8643f3	ALSA-2026:5578
AlmaLinux:8	seabios-bin	1.16.0-4.module_el8.9.0+3659+9c8643f3	ALSA-2026:5578
AlmaLinux:8	seavgabios-bin	1.16.0-4.module_el8.9.0+3659+9c8643f3	ALSA-2026:5578
AlmaLinux:8	sgabios	1:0.20170427git-3.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	sgabios-bin	1:0.20170427git-3.module_el8.6.0+2880+7d9e3703	ALSA-2026:5578
AlmaLinux:8	supermin	5.2.1-2.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:8	supermin-devel	5.2.1-2.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:8	swtpm	0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:8	swtpm-devel	0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:8	swtpm-libs	0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:8	swtpm-tools	0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:8	swtpm-tools-pkcs11	0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb	ALSA-2026:5578
AlmaLinux:8	virt-dib	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2026:5578
AlmaLinux:8	virt-v2v	1:1.42.0-22.module_el8.9.0+3659+9c8643f3	ALSA-2026:5578
AlmaLinux:8	virt-v2v-bash-completion	1:1.42.0-22.module_el8.9.0+3659+9c8643f3	ALSA-2026:5578
AlmaLinux:8	virt-v2v-man-pages-ja	1:1.42.0-22.module_el8.9.0+3659+9c8643f3	ALSA-2026:5578
AlmaLinux:8	virt-v2v-man-pages-uk	1:1.42.0-22.module_el8.9.0+3659+9c8643f3	ALSA-2026:5578
Debian:12	qemu	1:7.2+dfsg-7+deb12u18	DEBIAN-CVE-2025-11234
Debian:13	qemu	1:10.0.7+ds-0+deb13u1	DEBIAN-CVE-2025-11234
Debian:14	qemu	1:10.1.3+ds-1	DEBIAN-CVE-2025-11234
Rocky Linux:8	hivex	0:1.3.18-23.module+el8.10.0+1590+a67ab969	RLSA-2026:5578
Rocky Linux:8	hivex	0:1.3.18-23.module+el8.10.0+1835+43f01cbb	RLSA-2026:5578
Rocky Linux:8	libguestfs	1:1.44.0-9.module+el8.10.0+1835+43f01cbb.rocky.rocky	RLSA-2026:5578
Rocky Linux:8	libguestfs	1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky	RLSA-2026:5578
Rocky Linux:8	libguestfs-winsupport	0:8.10-1.module+el8.10.0+1451+358d0d76	RLSA-2026:5578
Rocky Linux:8	libguestfs-winsupport	0:8.10-1.module+el8.10.0+1835+43f01cbb	RLSA-2026:5578
Rocky Linux:8	libiscsi	0:1.18.0-8.module+el8.10.0+1590+a67ab969	RLSA-2026:5578
Rocky Linux:8	libiscsi	0:1.18.0-8.module+el8.10.0+1835+43f01cbb	RLSA-2026:5578
Rocky Linux:8	libnbd	0:1.6.0-6.module+el8.10.0+1870+0a714c9f	RLSA-2026:5578
Rocky Linux:8	libtpms	0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+2014+5ad6bca0	RLSA-2026:5578
Rocky Linux:8	libvirt	0:8.0.0-23.4.module+el8.10.0+2015+baffef50	RLSA-2026:5578
Rocky Linux:8	libvirt-dbus	0:1.3.0-2.module+el8.10.0+1835+43f01cbb	RLSA-2026:5578

Affected products (as reported)

Vendor	Product	Versions
	qemu	2.6.0 – before 10.1.2
Red Hat	Red Hat Enterprise Linux 10	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	see references
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	see references
Red Hat	Red Hat OpenShift Container Platform 4.12	see references
Red Hat	Red Hat OpenShift Container Platform 4.16	see references
Red Hat	Red Hat OpenShift Container Platform 4.17	see references
Red Hat	Red Hat OpenShift Container Platform 4.18	see references
Red Hat	Red Hat Enterprise Linux 6	see references
Red Hat	Red Hat Enterprise Linux 7	see references
Red Hat	Red Hat Enterprise Linux 7	see references

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

RHSA-2025:23228 vendor-advisory, x_refsource_REDHAT
RHSA-2026:0326 vendor-advisory, x_refsource_REDHAT
RHSA-2026:0332 vendor-advisory, x_refsource_REDHAT
RHSA-2026:0702 vendor-advisory, x_refsource_REDHAT
RHSA-2026:1831 vendor-advisory, x_refsource_REDHAT
RHSA-2026:18772 vendor-advisory, x_refsource_REDHAT
RHSA-2026:22147 vendor-advisory, x_refsource_REDHAT
RHSA-2026:3077 vendor-advisory, x_refsource_REDHAT
RHSA-2026:3165 vendor-advisory, x_refsource_REDHAT
RHSA-2026:5578 vendor-advisory, x_refsource_REDHAT
RHSA-2026:59831 vendor-advisory, x_refsource_REDHAT
RHSA-2026:68513 vendor-advisory, x_refsource_REDHAT
RHSA-2026:69131 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-11234 vdb-entry, x_refsource_REDHAT
RHBZ#2401209 issue-tracking, x_refsource_REDHAT