QEMU patches close guest memory and checksum leaks

QEMU developers posted fixes for guest-visible memory disclosure and out-of-bounds checksum handling, and merged a broader NBD pull covering two low-severity CVEs. Elsewhere, QEMU discussed ARM64 Microsoft Hypervisor support, a revised AI contribution policy, and multi-target builds, while PostgreSQL hackers refined hash-index WAL logging and logging wait events.

QEMU NBD client stops leaking uninitialized memory

A QEMU patch stops the NBD client from leaking uninitialized heap memory to a guest when the server is malicious. The change matters to anyone exposing guests to untrusted NBD servers, because the disclosure is a direct information leak rather than a crash.

QEMU checksum code fixes out-of-bounds IP header handling

A two-patch series corrects errors in QEMU's net/checksum.c when dealing with IP header length. The bug is a CVE that allows out-of-bounds checksum reads and writes in code used by virtio-net and xen-nic.

NBD pull merges CVE fixes and TLS guidance

A pull of eight NBD patches through 2026-11-10 merges fixes for two low-severity CVEs, new robustness tests, and TLS security guidance. Operators of QEMU NBD get both the security fixes and clearer advice on how TLS should be configured.

MSHV accelerator gains an ARM64 backend

A sixth revision of a 14-patch series adds ARM64 guest support to QEMU's MSHV accelerator. It refactors the existing x86 path and adds an ARM backend covering vCPU, MMIO, and vGIC, extending Microsoft Hypervisor acceleration beyond x86.

QEMU revises its policy on AI-generated contributions

Version 4 of a policy for docs/devel and AGENTS.md relaxes QEMU's blanket ban on AI-generated contributions. The proposal adds attestation trailers and requires pre-approval for large contributions, so submitters would have a defined trail rather than a flat prohibition.

Series clears QOM type conflicts for multi-target builds

A 48-patch series resolves QOM type name conflicts across targets so QEMU can build multi-target binaries with unified introspection. Without distinct type names, a single binary cannot safely expose the same object model for more than one target.

Hash index WAL logging drops pin-only registrations

A PostgreSQL patch series stops registering pin-only bucket pages in the WAL for hash indexes and removes REGBUF_NO_CHANGE. It also fixes a pre-existing torn-page hazard during recovery, tightening both the logging path and crash recovery for hash indexes.

Wait events cover server logging writes

A patch adds wait events for writes to server logging destinations, including syslog, stderr, and eventlog, plus a swap helper that preserves outer wait events. The events make logging stalls visible in the same wait-event machinery used for other server I/O.