Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0832-1 Final 1 1 2026-03-05T16:38:47Z current 2026-03-05T16:38:47Z 2026-03-05T16:38:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security issue: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). Non security issues: - * hw/virtio: Also include md stubs in case CONFIG_VIRTIO_PCI is not set (jsc#PED-14271). - * s390x/pv: prepare for memory devices (jsc#PED-14271). - * s390x/s390-skeys: prepare for memory devices (jsc#PED-14271). - * s390x/s390-stattrib-kvm: prepare for memory devices and sparse memory layouts (jsc#PED-14271). - * s390x/s390-virtio-ccw: prepare for memory devices (jsc#PED-14271). - * s390x/virtio-ccw: add support for virtio based memory devices (jsc#PED-14271). - * s390x: remember the maximum page size (jsc#PED-14271). - * s390x: virtio-mem support (jsc#PED-14271). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2026-832,SUSE-SLE-Module-Basesystem-15-SP7-2026-832,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-832,SUSE-SLE-Module-Server-Applications-15-SP7-2026-832 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260832-1/ Link for SUSE-SU-2026:0832-1 https://lists.suse.com/pipermail/sle-security-updates/2026-March/024637.html E-Mail link for SUSE-SU-2026:0832-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1255400 SUSE Bug 1255400 https://www.suse.com/security/cve/CVE-2025-14876/ SUSE CVE CVE-2025-14876 page SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-9.2.4-150700.3.17.1 qemu-SLOF-9.2.4-150700.3.17.1 qemu-accel-qtest-9.2.4-150700.3.17.1 qemu-accel-tcg-x86-9.2.4-150700.3.17.1 qemu-arm-9.2.4-150700.3.17.1 qemu-audio-alsa-9.2.4-150700.3.17.1 qemu-audio-dbus-9.2.4-150700.3.17.1 qemu-audio-jack-9.2.4-150700.3.17.1 qemu-audio-oss-9.2.4-150700.3.17.1 qemu-audio-pa-9.2.4-150700.3.17.1 qemu-audio-pipewire-9.2.4-150700.3.17.1 qemu-audio-spice-9.2.4-150700.3.17.1 qemu-block-curl-9.2.4-150700.3.17.1 qemu-block-dmg-9.2.4-150700.3.17.1 qemu-block-iscsi-9.2.4-150700.3.17.1 qemu-block-nfs-9.2.4-150700.3.17.1 qemu-block-rbd-9.2.4-150700.3.17.1 qemu-block-ssh-9.2.4-150700.3.17.1 qemu-chardev-baum-9.2.4-150700.3.17.1 qemu-chardev-spice-9.2.4-150700.3.17.1 qemu-doc-9.2.4-150700.3.17.1 qemu-extra-9.2.4-150700.3.17.1 qemu-guest-agent-9.2.4-150700.3.17.1 qemu-headless-9.2.4-150700.3.17.1 qemu-hw-display-qxl-9.2.4-150700.3.17.1 qemu-hw-display-virtio-gpu-9.2.4-150700.3.17.1 qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.17.1 qemu-hw-display-virtio-vga-9.2.4-150700.3.17.1 qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.17.1 qemu-hw-usb-host-9.2.4-150700.3.17.1 qemu-hw-usb-redirect-9.2.4-150700.3.17.1 qemu-hw-usb-smartcard-9.2.4-150700.3.17.1 qemu-img-9.2.4-150700.3.17.1 qemu-ipxe-9.2.4-150700.3.17.1 qemu-ivshmem-tools-9.2.4-150700.3.17.1 qemu-ksm-9.2.4-150700.3.17.1 qemu-lang-9.2.4-150700.3.17.1 qemu-linux-user-9.2.4-150700.3.17.1 qemu-microvm-9.2.4-150700.3.17.1 qemu-ppc-9.2.4-150700.3.17.1 qemu-pr-helper-9.2.4-150700.3.17.1 qemu-s390x-9.2.4-150700.3.17.1 qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1 qemu-skiboot-9.2.4-150700.3.17.1 qemu-spice-9.2.4-150700.3.17.1 qemu-tools-9.2.4-150700.3.17.1 qemu-ui-curses-9.2.4-150700.3.17.1 qemu-ui-dbus-9.2.4-150700.3.17.1 qemu-ui-gtk-9.2.4-150700.3.17.1 qemu-ui-opengl-9.2.4-150700.3.17.1 qemu-ui-spice-app-9.2.4-150700.3.17.1 qemu-ui-spice-core-9.2.4-150700.3.17.1 qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1 qemu-vhost-user-gpu-9.2.4-150700.3.17.1 qemu-vmsr-helper-9.2.4-150700.3.17.1 qemu-x86-9.2.4-150700.3.17.1 qemu-img-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-pr-helper-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-tools-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-vmsr-helper-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 qemu-SLOF-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-accel-qtest-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-arm-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-audio-jack-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-audio-oss-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-block-dmg-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-extra-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-hw-usb-smartcard-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-ivshmem-tools-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-linux-user-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-microvm-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-ppc-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-s390x-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-skiboot-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-vhost-user-gpu-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 qemu-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-SLOF-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-accel-tcg-x86-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-arm-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-alsa-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-dbus-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-pa-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-pipewire-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-audio-spice-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-curl-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-iscsi-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-nfs-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-rbd-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-block-ssh-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-chardev-baum-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-chardev-spice-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-guest-agent-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-headless-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-qxl-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-virtio-gpu-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-display-virtio-vga-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-usb-host-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-hw-usb-redirect-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ipxe-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ksm-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-lang-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ppc-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-s390x-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-skiboot-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-spice-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-curses-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-dbus-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-gtk-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-opengl-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-spice-app-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-ui-spice-core-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 qemu-x86-9.2.4-150700.3.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly. CVE-2025-14876 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-img-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-pr-helper-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-tools-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:qemu-vmsr-helper-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-SLOF-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-accel-qtest-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-arm-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-audio-jack-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-audio-oss-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-block-dmg-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-extra-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-hw-usb-smartcard-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ivshmem-tools-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-linux-user-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-microvm-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-ppc-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-s390x-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-skiboot-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:qemu-vhost-user-gpu-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-SLOF-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-accel-tcg-x86-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-arm-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-alsa-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-dbus-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-pa-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-pipewire-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-audio-spice-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-curl-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-iscsi-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-nfs-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-rbd-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-block-ssh-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-chardev-baum-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-chardev-spice-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-guest-agent-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-headless-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-qxl-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-virtio-gpu-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-display-virtio-vga-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-s390x-virtio-gpu-ccw-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-usb-host-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-hw-usb-redirect-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ipxe-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ksm-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-lang-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ppc-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-s390x-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-skiboot-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-spice-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-curses-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-dbus-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-gtk-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-opengl-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-spice-app-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-ui-spice-core-9.2.4-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:qemu-x86-9.2.4-150700.3.17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260832-1/ https://www.suse.com/security/cve/CVE-2025-14876.html CVE-2025-14876 https://bugzilla.suse.com/1255400 SUSE Bug 1255400