Developing
Patch fixes use-after-free in QXL hot-unplug (CVE-2026-63322) by adding exit callback to unregister VM state handler and BHs.
Databases & Infrastructure · 12h ago
Patch fixes CVE-2026-16457: packed vring virtio_queue_empty() could loop forever on broken device, unlike split vrings.
Databases & Infrastructure · 12h ago
QEMU patches e1000e/igb to ignore untrusted rx_desc_len from migration stream, preventing stack buffer overflow.
Databases & Infrastructure · 15h ago
Patch extends incomplete CVE-2021-3611 fix by adding memory attrs to three more Intel HDA DMA paths to block guest-triggered MMIO reentry.
Databases & Infrastructure · 17h ago
Pull request merges 15 UI and virtio-gpu fixes, several addressing OOB writes, allocation failures and TOCTOU issues for QEMU 11.1.
Databases & Infrastructure · 19h ago
QEMU pull request merges 7 USB fixes including two CVEs (use-after-free, zero max_packet_size crashes) and guest-triggerable OOB/assert issues.
Databases & Infrastructure · 32h ago