{"affected":[{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-guest-agent","purl":"pkg:rpm/almalinux/qemu-guest-agent"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-img","purl":"pkg:rpm/almalinux/qemu-img"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm","purl":"pkg:rpm/almalinux/qemu-kvm"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-audio-pa","purl":"pkg:rpm/almalinux/qemu-kvm-audio-pa"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-block-blkio","purl":"pkg:rpm/almalinux/qemu-kvm-block-blkio"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-block-curl","purl":"pkg:rpm/almalinux/qemu-kvm-block-curl"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-block-rbd","purl":"pkg:rpm/almalinux/qemu-kvm-block-rbd"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-common","purl":"pkg:rpm/almalinux/qemu-kvm-common"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-core","purl":"pkg:rpm/almalinux/qemu-kvm-core"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-device-display-virtio-gpu","purl":"pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-device-display-virtio-gpu-ccw","purl":"pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-ccw"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-device-display-virtio-gpu-pci","purl":"pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-pci"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-device-display-virtio-vga","purl":"pkg:rpm/almalinux/qemu-kvm-device-display-virtio-vga"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-device-usb-host","purl":"pkg:rpm/almalinux/qemu-kvm-device-usb-host"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-device-usb-redirect","purl":"pkg:rpm/almalinux/qemu-kvm-device-usb-redirect"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-docs","purl":"pkg:rpm/almalinux/qemu-kvm-docs"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-tools","purl":"pkg:rpm/almalinux/qemu-kvm-tools"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-ui-egl-headless","purl":"pkg:rpm/almalinux/qemu-kvm-ui-egl-headless"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-kvm-ui-opengl","purl":"pkg:rpm/almalinux/qemu-kvm-ui-opengl"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]},{"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:88421.json"},"package":{"ecosystem":"AlmaLinux:9","name":"qemu-pr-helper","purl":"pkg:rpm/almalinux/qemu-pr-helper"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"17:10.1.0-17.el9_8.9.alma.1"}],"type":"ECOSYSTEM"}]}],"details":"Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.  \n\nSecurity Fix(es):  \n\n  * qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys (CVE-2026-12080)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * qemu-img can't create a qcow2 overlay with 'data_file' feature on top of a file without destroying the original image [almalinux-9.8.z] (JIRA:AlmaLinux-164549)\n  * live migration of a VM with a scsi3pr to a node that previously held a reservation on that disk fails. [almalinux-9.8.z] (JIRA:AlmaLinux-280223)\n  * Fix pending QEMU issues for L1VH GA - QEMU [almalinux-9.8.z] (JIRA:AlmaLinux-283121)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","id":"ALSA-2026:88421","modified":"2026-11-04T16:45:02.633559162Z","published":"2026-10-22T00:00:00Z","references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:88421"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-12080"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2499603"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-88421.html"}],"related":["CVE-2026-12080"],"schema_version":"1.9.2","summary":"Important: qemu-kvm security, bug fix, and enhancement update","upstream":["CVE-2026-12080"]}