- Issued:
- 2026-05-19
- Updated:
- 2026-05-19
RHSA-2026:18772 - Moderate: qemu-kvm security update
Synopsis
Moderate: qemu-kvm security update
Type/Severity
Security Advisory Moderate
Topic
An update for qemu-kvm is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.
Security Fix(es):
- qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Enterprise Linux for x86_64 | 9 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions | 9.8 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 9.8 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Life Cycle | 9.8 | x86_64 |
| Red Hat Enterprise Linux for Power, little endian | 9 | ppc64le |
| Red Hat Enterprise Linux for Power, little endian - Extended Update Support | 9.8 | ppc64le |
| Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle | 9.8 | ppc64le |
| Red Hat Enterprise Linux for IBM z Systems | 9 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Update Support | 9.8 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle | 9.8 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - 4 years of updates | 9.8 | s390x |
| Red Hat Enterprise Linux for ARM 64 | 9 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - Extended Update Support | 9.8 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle | 9.8 | aarch64 |
| Red Hat Enterprise Linux for ARM 64 - 4 years of updates | 9.8 | aarch64 |
| Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions | 9.8 | ppc64le |
Updated Packages
- qemu-kvm-ui-opengl-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-debugsource-10.1.0-17.el9_8.x86_64.rpm
- qemu-pr-helper-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-pr-helper-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-block-curl-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-debugsource-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-core-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-rbd-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-usb-redirect-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-core-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-audio-pa-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-core-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-audio-dbus-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-tests-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-device-usb-host-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-common-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-blkio-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-img-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-block-curl-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-block-curl-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-usb-host-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-display-virtio-gpu-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-tools-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-block-rbd-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-10.1.0-17.el9_8.src.rpm
- qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-display-virtio-gpu-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-block-curl-10.1.0-17.el9_8.s390x.rpm
- qemu-guest-agent-10.1.0-17.el9_8.ppc64le.rpm
- qemu-kvm-debuginfo-10.1.0-17.el9_8.ppc64le.rpm
- qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.aarch64.rpm
- qemu-img-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-core-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-block-rbd-10.1.0-17.el9_8.s390x.rpm
- qemu-img-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-common-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-device-usb-redirect-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-audio-dbus-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-pr-helper-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-curl-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-block-rbd-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-ui-dbus-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-ui-opengl-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.s390x.rpm
- qemu-pr-helper-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-ui-dbus-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-block-blkio-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-audio-dbus-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-curl-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.x86_64.rpm
- qemu-pr-helper-10.1.0-17.el9_8.s390x.rpm
- qemu-guest-agent-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-tools-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-tests-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-usb-host-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-display-virtio-gpu-ccw-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-common-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-common-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-usb-host-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-10.1.0-17.el9_8.aarch64.rpm
- qemu-img-debuginfo-10.1.0-17.el9_8.ppc64le.rpm
- qemu-img-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-rbd-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-core-10.1.0-17.el9_8.aarch64.rpm
- qemu-pr-helper-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-guest-agent-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-rbd-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-debugsource-10.1.0-17.el9_8.ppc64le.rpm
- qemu-kvm-tools-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-audio-pa-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-display-virtio-vga-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-guest-agent-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.x86_64.rpm
- qemu-guest-agent-debuginfo-10.1.0-17.el9_8.ppc64le.rpm
- qemu-guest-agent-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-audio-pa-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-img-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-audio-pa-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-guest-agent-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-display-virtio-gpu-pci-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-audio-pa-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-display-virtio-gpu-pci-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-tools-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-common-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-block-blkio-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-tests-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-blkio-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-ui-egl-headless-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-ui-dbus-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-usb-host-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-block-blkio-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-usb-host-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.x86_64.rpm
- qemu-img-10.1.0-17.el9_8.ppc64le.rpm
- qemu-kvm-debugsource-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-device-display-virtio-gpu-ccw-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-common-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-docs-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-tools-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-core-debuginfo-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-tools-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-audio-pa-debuginfo-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-docs-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-10.1.0-17.el9_8.x86_64.rpm
- qemu-img-10.1.0-17.el9_8.s390x.rpm
- qemu-kvm-block-blkio-10.1.0-17.el9_8.aarch64.rpm
- qemu-kvm-docs-10.1.0-17.el9_8.x86_64.rpm
- qemu-kvm-device-display-virtio-gpu-debuginfo-10.1.0-17.el9_8.aarch64.rpm
- qemu-guest-agent-10.1.0-17.el9_8.s390x.rpm
Fixes
- This content is not included.BZ - 2401209
- This content is not included.RHEL-120257
- This content is not included.RHEL-119369
- This content is not included.RHEL-126593
- This content is not included.RHEL-129949
- This content is not included.RHEL-131144
- This content is not included.RHEL-139057
- This content is not included.RHEL-67115
- This content is not included.RHEL-151679
CVEs
References
- https://access.redhat.com/security/updates/classification/#moderate
- https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at Security Contacts and Procedures.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.