Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:20008-1 Final 1 1 2025-12-22T15:42:55Z current 2025-12-22T15:42:55Z 2025-12-22T15:42:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-2025-11234: use-after-free in WebSocket handshake operations can be exploited by a malicious client with network access to the VNC WebSocket port to cause a denial-of-service (bsc#1250984). Other updates and bugfixes: - [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286). - block/curl: fix curl internal handles handling (bsc#1252768). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Micro-6.1-357 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-202620008-1/ Link for SUSE-SU-2026:20008-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023716.html E-Mail link for SUSE-SU-2026:20008-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1250984 SUSE Bug 1250984 https://bugzilla.suse.com/1252768 SUSE Bug 1252768 https://bugzilla.suse.com/1253002 SUSE Bug 1253002 https://bugzilla.suse.com/1254286 SUSE Bug 1254286 https://www.suse.com/security/cve/CVE-2025-11234/ SUSE CVE CVE-2025-11234 page https://www.suse.com/security/cve/CVE-2025-12464/ SUSE CVE CVE-2025-12464 page SUSE Linux Micro 6.1 qemu-8.2.10-slfo.1.1_3.1 qemu-SLOF-8.2.10-slfo.1.1_3.1 qemu-accel-tcg-x86-8.2.10-slfo.1.1_3.1 qemu-arm-8.2.10-slfo.1.1_3.1 qemu-audio-spice-8.2.10-slfo.1.1_3.1 qemu-block-curl-8.2.10-slfo.1.1_3.1 qemu-block-iscsi-8.2.10-slfo.1.1_3.1 qemu-block-nfs-8.2.10-slfo.1.1_3.1 qemu-block-rbd-8.2.10-slfo.1.1_3.1 qemu-block-ssh-8.2.10-slfo.1.1_3.1 qemu-chardev-spice-8.2.10-slfo.1.1_3.1 qemu-guest-agent-8.2.10-slfo.1.1_3.1 qemu-headless-8.2.10-slfo.1.1_3.1 qemu-hw-display-qxl-8.2.10-slfo.1.1_3.1 qemu-hw-display-virtio-gpu-8.2.10-slfo.1.1_3.1 qemu-hw-display-virtio-gpu-pci-8.2.10-slfo.1.1_3.1 qemu-hw-display-virtio-vga-8.2.10-slfo.1.1_3.1 qemu-hw-usb-host-8.2.10-slfo.1.1_3.1 qemu-hw-usb-redirect-8.2.10-slfo.1.1_3.1 qemu-img-8.2.10-slfo.1.1_3.1 qemu-ipxe-8.2.10-slfo.1.1_3.1 qemu-ksm-8.2.10-slfo.1.1_3.1 qemu-lang-8.2.10-slfo.1.1_3.1 qemu-ppc-8.2.10-slfo.1.1_3.1 qemu-pr-helper-8.2.10-slfo.1.1_3.1 qemu-s390x-8.2.10-slfo.1.1_3.1 qemu-seabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 qemu-spice-8.2.10-slfo.1.1_3.1 qemu-tools-8.2.10-slfo.1.1_3.1 qemu-ui-opengl-8.2.10-slfo.1.1_3.1 qemu-ui-spice-core-8.2.10-slfo.1.1_3.1 qemu-vgabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 qemu-x86-8.2.10-slfo.1.1_3.1 qemu-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-SLOF-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-accel-tcg-x86-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-arm-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-audio-spice-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-block-curl-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-block-iscsi-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-block-nfs-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-block-rbd-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-block-ssh-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-chardev-spice-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-guest-agent-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-headless-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-hw-display-qxl-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-hw-display-virtio-gpu-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-hw-display-virtio-gpu-pci-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-hw-display-virtio-vga-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-hw-usb-host-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-hw-usb-redirect-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-img-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-ipxe-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-ksm-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-lang-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-ppc-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-pr-helper-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-s390x-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-seabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-spice-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-tools-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-ui-opengl-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-ui-spice-core-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-vgabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 qemu-x86-8.2.10-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication. CVE-2025-11234 SUSE Linux Micro 6.1:qemu-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-SLOF-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-accel-tcg-x86-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-arm-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-audio-spice-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-curl-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-iscsi-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-nfs-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-rbd-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-ssh-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-chardev-spice-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-guest-agent-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-headless-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-qxl-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-virtio-gpu-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-virtio-gpu-pci-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-virtio-vga-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-usb-host-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-usb-redirect-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-img-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ipxe-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ksm-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-lang-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ppc-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-pr-helper-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-s390x-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-seabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-spice-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-tools-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ui-opengl-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ui-spice-core-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-vgabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-x86-8.2.10-slfo.1.1_3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-202620008-1/ https://www.suse.com/security/cve/CVE-2025-11234.html CVE-2025-11234 https://bugzilla.suse.com/1250984 SUSE Bug 1250984 A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This could lead to a buffer overrun in the e1000_receive_iov() function via the loopback code path. A malicious guest user could use this vulnerability to crash the QEMU process on the host, resulting in a denial of service. CVE-2025-12464 SUSE Linux Micro 6.1:qemu-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-SLOF-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-accel-tcg-x86-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-arm-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-audio-spice-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-curl-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-iscsi-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-nfs-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-rbd-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-block-ssh-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-chardev-spice-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-guest-agent-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-headless-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-qxl-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-virtio-gpu-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-virtio-gpu-pci-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-display-virtio-vga-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-usb-host-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-hw-usb-redirect-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-img-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ipxe-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ksm-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-lang-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ppc-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-pr-helper-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-s390x-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-seabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-spice-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-tools-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ui-opengl-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-ui-spice-core-8.2.10-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-vgabios-8.2.101.16.3_3_ga95067eb-slfo.1.1_3.1 SUSE Linux Micro 6.1:qemu-x86-8.2.10-slfo.1.1_3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-202620008-1/ https://www.suse.com/security/cve/CVE-2025-12464.html CVE-2025-12464 https://bugzilla.suse.com/1253002 SUSE Bug 1253002