Red Hat Red Hat Enterprise Linux for NVIDIA 26

• CVE-2026-93834 High 8.8 Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape 0.4%
• CVE-2026-81627 High 8.2 Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram 0.2%
• CVE-2026-18917 High 7.8 Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow 0.2%
• CVE-2026-6426 Medium 4.4 Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access 0.4%
• CVE-2026-63622 High 7.8 Libvirt: swtpm privilege escalation via symlink following 0.1%
• CVE-2026-63623 Medium 5.5 Libvirt: information disclosure via world-readable storage volume images during clone/convert <0.1%
• CVE-2026-61477 Low 2.3 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection 0.2%
• CVE-2026-12080 High 7.3 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys 0.1%
• CVE-2026-48914 Medium 6.7 Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling 0.2%