Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0445-1 Final 1 1 2026-02-11T10:20:02Z current 2026-02-11T10:20:02Z 2026-02-11T10:20:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2026-0665: Added PIRQ bounds check in xen_physdev_map_pirq to avoid an out-of-bounds heap. (bsc#1256484) Other fixes: - Fixed that QEMU migration fails if a qemu-vdagent channel is present in the VM (bsc#1257474) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2026-445,SUSE-SLE-Module-Basesystem-15-SP7-2026-445,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-445,SUSE-SLE-Module-Server-Applications-15-SP7-2026-445 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260445-1/ Link for SUSE-SU-2026:0445-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024103.html E-Mail link for SUSE-SU-2026:0445-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1256484 SUSE Bug 1256484 https://bugzilla.suse.com/1257474 SUSE Bug 1257474 https://www.suse.com/security/cve/CVE-2026-0665/ SUSE CVE CVE-2026-0665 page SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-9.2.4-150700.3.14.1 qemu-SLOF-9.2.4-150700.3.14.1 qemu-accel-qtest-9.2.4-150700.3.14.1 qemu-accel-tcg-x86-9.2.4-150700.3.14.1 qemu-arm-9.2.4-150700.3.14.1 qemu-audio-alsa-9.2.4-150700.3.14.1 qemu-audio-dbus-9.2.4-150700.3.14.1 qemu-audio-jack-9.2.4-150700.3.14.1 qemu-audio-oss-9.2.4-150700.3.14.1 qemu-audio-pa-9.2.4-150700.3.14.1 qemu-audio-pipewire-9.2.4-150700.3.14.1 qemu-audio-spice-9.2.4-150700.3.14.1 qemu-block-curl-9.2.4-150700.3.14.1 qemu-block-dmg-9.2.4-150700.3.14.1 qemu-block-iscsi-9.2.4-150700.3.14.1 qemu-block-nfs-9.2.4-150700.3.14.1 qemu-block-rbd-9.2.4-150700.3.14.1 qemu-block-ssh-9.2.4-150700.3.14.1 qemu-chardev-baum-9.2.4-150700.3.14.1 qemu-chardev-spice-9.2.4-150700.3.14.1 qemu-doc-9.2.4-150700.3.14.1 qemu-extra-9.2.4-150700.3.14.1 qemu-guest-agent-9.2.4-150700.3.14.1 qemu-headless-9.2.4-150700.3.14.1 qemu-hw-display-qxl-9.2.4-150700.3.14.1 qemu-hw-display-virtio-gpu-9.2.4-150700.3.14.1 qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.14.1 qemu-hw-display-virtio-vga-9.2.4-150700.3.14.1 qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.14.1 qemu-hw-usb-host-9.2.4-150700.3.14.1 qemu-hw-usb-redirect-9.2.4-150700.3.14.1 qemu-hw-usb-smartcard-9.2.4-150700.3.14.1 qemu-img-9.2.4-150700.3.14.1 qemu-ipxe-9.2.4-150700.3.14.1 qemu-ivshmem-tools-9.2.4-150700.3.14.1 qemu-ksm-9.2.4-150700.3.14.1 qemu-lang-9.2.4-150700.3.14.1 qemu-linux-user-9.2.4-150700.3.14.1 qemu-microvm-9.2.4-150700.3.14.1 qemu-ppc-9.2.4-150700.3.14.1 qemu-pr-helper-9.2.4-150700.3.14.1 qemu-s390x-9.2.4-150700.3.14.1 qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1 qemu-skiboot-9.2.4-150700.3.14.1 qemu-spice-9.2.4-150700.3.14.1 qemu-tools-9.2.4-150700.3.14.1 qemu-ui-curses-9.2.4-150700.3.14.1 qemu-ui-dbus-9.2.4-150700.3.14.1 qemu-ui-gtk-9.2.4-150700.3.14.1 qemu-ui-opengl-9.2.4-150700.3.14.1 qemu-ui-spice-app-9.2.4-150700.3.14.1 qemu-ui-spice-core-9.2.4-150700.3.14.1 qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1 qemu-vhost-user-gpu-9.2.4-150700.3.14.1 qemu-vmsr-helper-9.2.4-150700.3.14.1 qemu-x86-9.2.4-150700.3.14.1 qemu-img-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-pr-helper-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-tools-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-vmsr-helper-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-SLOF-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-accel-qtest-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-arm-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-audio-jack-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-audio-oss-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-block-dmg-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-extra-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-hw-usb-smartcard-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-ivshmem-tools-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-linux-user-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-microvm-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-ppc-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-s390x-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-skiboot-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-vhost-user-gpu-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-SLOF-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-accel-tcg-x86-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-arm-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-alsa-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-dbus-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-pa-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-pipewire-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-spice-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-curl-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-iscsi-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-nfs-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-rbd-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-ssh-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-chardev-baum-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-chardev-spice-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-guest-agent-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-headless-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-qxl-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-virtio-gpu-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-virtio-vga-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-usb-host-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-usb-redirect-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ipxe-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ksm-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-lang-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ppc-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-s390x-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-skiboot-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-spice-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-curses-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-dbus-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-gtk-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-opengl-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-spice-app-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-spice-core-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-x86-9.2.4-150700.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 unknown CVE-2026-0665 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-img-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-pr-helper-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-tools-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-vmsr-helper-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-SLOF-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-accel-qtest-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-arm-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-audio-jack-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-audio-oss-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-block-dmg-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-extra-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-hw-usb-smartcard-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ivshmem-tools-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-linux-user-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-microvm-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ppc-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-s390x-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-skiboot-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-vhost-user-gpu-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-SLOF-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-accel-tcg-x86-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-arm-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-alsa-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-dbus-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-pa-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-pipewire-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-spice-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-curl-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-iscsi-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-nfs-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-rbd-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-ssh-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-chardev-baum-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-chardev-spice-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-guest-agent-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-headless-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-qxl-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-virtio-gpu-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-virtio-vga-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-usb-host-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-usb-redirect-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ipxe-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ksm-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-lang-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ppc-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-s390x-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-skiboot-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-spice-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-curses-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-dbus-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-gtk-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-opengl-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-spice-app-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-spice-core-9.2.4-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-x86-9.2.4-150700.3.14.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260445-1/ https://www.suse.com/security/cve/CVE-2026-0665.html CVE-2026-0665 https://bugzilla.suse.com/1256484 SUSE Bug 1256484