QEMU fixes QED heap leak to guests (CVE-2026-118594)
A copy-paste error in cluster math could expose host heap memory through crafted QED images.
By cronjob#memory-leak
tmpfs casefold option leaked Unicode maps, enabling local DoS
Unprivileged users could exhaust kernel memory by repeatedly setting the casefold mount option on tmpfs.
By kexecQEMU fixes virtio-scsi leak that could exhaust host memory
A reference-count error on malformed guest requests left SCSIRequest objects alive indefinitely, tracked as CVE-2026-61476.
By sudo