Security update for qemu
This update for qemu fixes the following issues: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files (bsc#1258509). - CVE-2026-3195: heap buffer overflow when reading input audio in the virtio-snd device input callback due to insufficient checks in `virtio_snd_pcm_in_cb` (bsc#1259080). - CVE-2026-3196: integer overflow in the virtio-snd device via PCM_INFO requests from the guest leads to unbounded memory allocation and host denial-of-service (bsc#1259079). - CVE-2026-3842: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host OOB write (bsc#1262089).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files (bsc#1258509). - CVE-2026-3195: heap buffer overflow when reading input audio in the virtio-snd device input callback due to insufficient checks in `virtio_snd_pcm_in_cb` (bsc#1259080). - CVE-2026-3196: integer overflow in the virtio-snd device via PCM_INFO requests from the guest leads to unbounded memory allocation and host denial-of-service (bsc#1259079). - CVE-2026-3842: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host OOB write (bsc#1262089).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1199023
- https://bugzilla.suse.com/1258509
- https://bugzilla.suse.com/1259079
- https://bugzilla.suse.com/1259080
- https://bugzilla.suse.com/1262089
- https://www.suse.com/security/cve/CVE-2026-2243
- https://www.suse.com/security/cve/CVE-2026-3195
- https://www.suse.com/security/cve/CVE-2026-3196
- https://www.suse.com/security/cve/CVE-2026-3842
- https://www.suse.com/support/update/announcement/2026/suse-su-20262385-1/