{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3195.json" } ], "title": "qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for CVE-2024-7730)", "tracking": { "current_release_date": "2026-06-30T04:01:09+00:00", "generator": { "date": "2026-06-30T04:01:09+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.0" } }, "id": "CVE-2026-3195", "initial_release_date": "2026-02-20T00:00:00+00:00", "revision_history": [ { "date": "2026-02-20T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-06-19T18:03:09+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-06-30T04:01:09+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 10", "product": { "name": "Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6", "product": { "name": "Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4", "product": { "name": "Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "category": "product_version", "name": "qemu-kvm-device-display-virtio-gpu-ccw", "product": { "name": "qemu-kvm-device-display-virtio-gpu-ccw", "product_id": "qemu-kvm-device-display-virtio-gpu-ccw", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-ccw" } } }, { "category": "product_version", "name": "qemu-kvm-device-display-virtio-gpu", "product": { "name": "qemu-kvm-device-display-virtio-gpu", "product_id": "qemu-kvm-device-display-virtio-gpu", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu" } } }, { "category": "product_version", "name": "qemu-guest-agent", "product": { "name": "qemu-guest-agent", "product_id": "qemu-guest-agent", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-guest-agent" } } }, { "category": "product_version", "name": "qemu-kvm", "product": { "name": "qemu-kvm", "product_id": "qemu-kvm", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm" } } }, { "category": "product_version", "name": "qemu-kvm-tools", "product": { "name": "qemu-kvm-tools", "product_id": "qemu-kvm-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tools" } } }, { "category": "product_version", "name": "qemu-kvm-ui-opengl", "product": { "name": "qemu-kvm-ui-opengl", "product_id": "qemu-kvm-ui-opengl", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-ui-opengl" } } }, { "category": "product_version", "name": "qemu-kvm-ui-egl-headless", "product": { "name": "qemu-kvm-ui-egl-headless", "product_id": "qemu-kvm-ui-egl-headless", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-ui-egl-headless" } } }, { "category": "product_version", "name": "qemu-kvm-block-rbd", "product": { "name": "qemu-kvm-block-rbd", "product_id": "qemu-kvm-block-rbd", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-rbd" } } }, { "category": "product_version", "name": "qemu-kvm-device-display-virtio-gpu-pci", "product": { "name": "qemu-kvm-device-display-virtio-gpu-pci", "product_id": "qemu-kvm-device-display-virtio-gpu-pci", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-pci" } } }, { "category": "product_version", "name": "qemu-kvm-core", "product": { "name": "qemu-kvm-core", "product_id": "qemu-kvm-core", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-core" } } }, { "category": "product_version", "name": "qemu-kvm-device-display-virtio-vga", "product": { "name": "qemu-kvm-device-display-virtio-vga", "product_id": "qemu-kvm-device-display-virtio-vga", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-vga" } } }, { "category": "product_version", "name": "qemu-kvm-docs", "product": { "name": "qemu-kvm-docs", "product_id": "qemu-kvm-docs", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-docs" } } }, { "category": "product_version", "name": "qemu-kvm-device-usb-host", "product": { "name": "qemu-kvm-device-usb-host", "product_id": "qemu-kvm-device-usb-host", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-usb-host" } } }, { "category": "product_version", "name": "qemu-kvm-common", "product": { "name": "qemu-kvm-common", "product_id": "qemu-kvm-common", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-common" } } }, { "category": "product_version", "name": "qemu-kvm-block-curl", "product": { "name": "qemu-kvm-block-curl", "product_id": "qemu-kvm-block-curl", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-curl" } } }, { "category": "product_version", "name": "qemu-kvm-audio-pa", "product": { "name": "qemu-kvm-audio-pa", "product_id": "qemu-kvm-audio-pa", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-audio-pa" } } }, { "category": "product_version", "name": "qemu-img", "product": { "name": "qemu-img", "product_id": "qemu-img", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img" } } }, { "category": "product_version", "name": "qemu-kvm.src", "product": { "name": "qemu-kvm.src", "product_id": "qemu-kvm.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm?arch=src" } } }, { "category": "product_version", "name": "qemu-kvm-device-usb-redirect", "product": { "name": "qemu-kvm-device-usb-redirect", "product_id": "qemu-kvm-device-usb-redirect", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-usb-redirect" } } }, { "category": "product_version", "name": "qemu-pr-helper", "product": { "name": "qemu-pr-helper", "product_id": "qemu-pr-helper", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-pr-helper" } } }, { "category": "product_version", "name": "qemu-kvm-block-blkio", "product": { "name": "qemu-kvm-block-blkio", "product_id": "qemu-kvm-block-blkio", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-blkio" } } }, { "category": "product_version", "name": "qemu-guest-agent-win32", "product": { "name": "qemu-guest-agent-win32", "product_id": "qemu-guest-agent-win32", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-guest-agent-win32" } } }, { "category": "product_version", "name": "libcacard-tools", "product": { "name": "libcacard-tools", "product_id": "libcacard-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-tools" } } }, { "category": "product_version", "name": "libcacard-devel", "product": { "name": "libcacard-devel", "product_id": "libcacard-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-devel" } } }, { "category": "product_version", "name": "libcacard", "product": { "name": "libcacard", "product_id": "libcacard", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard" } } }, { "category": "product_version", "name": "qemu-kvm-ma.src", "product": { "name": "qemu-kvm-ma.src", "product_id": "qemu-kvm-ma.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-ma?arch=src" } } }, { "category": "product_version", "name": "qemu-kvm-common-ma", "product": { "name": "qemu-kvm-common-ma", "product_id": "qemu-kvm-common-ma", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-common-ma" } } }, { "category": "product_version", "name": "qemu-img-ma", "product": { "name": "qemu-img-ma", "product_id": "qemu-img-ma", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img-ma" } } }, { "category": "product_version", "name": "qemu-kvm-tools-ma", "product": { "name": "qemu-kvm-tools-ma", "product_id": "qemu-kvm-tools-ma", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tools-ma" } } }, { "category": "product_version", "name": "qemu-kvm-ma", "product": { "name": "qemu-kvm-ma", "product_id": "qemu-kvm-ma", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-ma" } } }, { "category": "product_version", "name": "qemu-kvm-docs::virt:rhel", "product": { "name": "qemu-kvm-docs (virt:rhel)", "product_id": "qemu-kvm-docs::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-docs?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-hw-usbredir::virt:rhel", "product": { "name": "qemu-kvm-hw-usbredir (virt:rhel)", "product_id": "qemu-kvm-hw-usbredir::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-hw-usbredir?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-block-ssh::virt:rhel", "product": { "name": "qemu-kvm-block-ssh (virt:rhel)", "product_id": "qemu-kvm-block-ssh::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-ssh?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-block-gluster::virt:rhel", "product": { "name": "qemu-kvm-block-gluster (virt:rhel)", "product_id": "qemu-kvm-block-gluster::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-gluster?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-guest-agent::virt:rhel", "product": { "name": "qemu-guest-agent (virt:rhel)", "product_id": "qemu-guest-agent::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-guest-agent?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-ui-opengl::virt:rhel", "product": { "name": "qemu-kvm-ui-opengl (virt:rhel)", "product_id": "qemu-kvm-ui-opengl::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-ui-opengl?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-common::virt:rhel", "product": { "name": "qemu-kvm-common (virt:rhel)", "product_id": "qemu-kvm-common::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-common?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-tests::virt:rhel", "product": { "name": "qemu-kvm-tests (virt:rhel)", "product_id": "qemu-kvm-tests::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tests?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-block-curl::virt:rhel", "product": { "name": "qemu-kvm-block-curl (virt:rhel)", "product_id": "qemu-kvm-block-curl::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-curl?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-img::virt:rhel", "product": { "name": "qemu-img (virt:rhel)", "product_id": "qemu-img::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-block-rbd::virt:rhel", "product": { "name": "qemu-kvm-block-rbd (virt:rhel)", "product_id": "qemu-kvm-block-rbd::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-rbd?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm::virt:rhel", "product": { "name": "qemu-kvm (virt:rhel)", "product_id": "qemu-kvm::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-ui-spice::virt:rhel", "product": { "name": "qemu-kvm-ui-spice (virt:rhel)", "product_id": "qemu-kvm-ui-spice::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-ui-spice?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm.src::virt:rhel", "product": { "name": "qemu-kvm.src (virt:rhel)", "product_id": "qemu-kvm.src::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm?arch=src&rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-core::virt:rhel", "product": { "name": "qemu-kvm-core (virt:rhel)", "product_id": "qemu-kvm-core::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-core?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-block-iscsi::virt:rhel", "product": { "name": "qemu-kvm-block-iscsi (virt:rhel)", "product_id": "qemu-kvm-block-iscsi::virt:rhel", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-block-iscsi?rpmmod=virt:rhel" } } }, { "category": "product_version", "name": "qemu-kvm-device-display-virtio-vga-gl", "product": { "name": "qemu-kvm-device-display-virtio-vga-gl", "product_id": "qemu-kvm-device-display-virtio-vga-gl", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-vga-gl" } } }, { "category": "product_version", "name": "qemu-kvm-device-display-virtio-gpu-pci-gl", "product": { "name": "qemu-kvm-device-display-virtio-gpu-pci-gl", "product_id": "qemu-kvm-device-display-virtio-gpu-pci-gl", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-pci-gl" } } }, { "category": "product_version", "name": "qemu-kvm-device-display-virtio-gpu-gl", "product": { "name": "qemu-kvm-device-display-virtio-gpu-gl", "product_id": "qemu-kvm-device-display-virtio-gpu-gl", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-gl" } } }, { "category": "product_version", "name": "rhcos", "product": { "name": "rhcos", "product_id": "rhcos", "product_identification_helper": { "purl": "pkg:generic/redhat/rhcos" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-guest-agent" }, "product_reference": "qemu-guest-agent", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-img" }, "product_reference": "qemu-img", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm" }, "product_reference": "qemu-kvm", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-audio-pa as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-audio-pa" }, "product_reference": "qemu-kvm-audio-pa", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-blkio as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-block-blkio" }, "product_reference": "qemu-kvm-block-blkio", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-curl as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-block-curl" }, "product_reference": "qemu-kvm-block-curl", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-rbd as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-block-rbd" }, "product_reference": "qemu-kvm-block-rbd", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-common" }, "product_reference": "qemu-kvm-common", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-core as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-core" }, "product_reference": "qemu-kvm-core", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu" }, "product_reference": "qemu-kvm-device-display-virtio-gpu", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu-ccw as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-ccw" }, "product_reference": "qemu-kvm-device-display-virtio-gpu-ccw", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu-pci as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-pci" }, "product_reference": "qemu-kvm-device-display-virtio-gpu-pci", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-vga as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-vga" }, "product_reference": "qemu-kvm-device-display-virtio-vga", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-usb-host as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-device-usb-host" }, "product_reference": "qemu-kvm-device-usb-host", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-usb-redirect as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-device-usb-redirect" }, "product_reference": "qemu-kvm-device-usb-redirect", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-docs as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-docs" }, "product_reference": "qemu-kvm-docs", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-tools" }, "product_reference": "qemu-kvm-tools", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ui-egl-headless as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-ui-egl-headless" }, "product_reference": "qemu-kvm-ui-egl-headless", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ui-opengl as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm-ui-opengl" }, "product_reference": "qemu-kvm-ui-opengl", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-kvm.src" }, "product_reference": "qemu-kvm.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-pr-helper as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:qemu-pr-helper" }, "product_reference": "qemu-pr-helper", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:qemu-guest-agent" }, "product_reference": "qemu-guest-agent", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-win32 as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:qemu-guest-agent-win32" }, "product_reference": "qemu-guest-agent-win32", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:qemu-img" }, "product_reference": "qemu-img", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:qemu-kvm" }, "product_reference": "qemu-kvm", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:qemu-kvm-tools" }, "product_reference": "qemu-kvm-tools", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm.src as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:qemu-kvm.src" }, "product_reference": "qemu-kvm.src", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:libcacard" }, "product_reference": "libcacard", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:libcacard-devel" }, "product_reference": "libcacard-devel", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:libcacard-tools" }, "product_reference": "libcacard-tools", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-guest-agent" }, "product_reference": "qemu-guest-agent", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-img" }, "product_reference": "qemu-img", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-ma as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-img-ma" }, "product_reference": "qemu-img-ma", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm" }, "product_reference": "qemu-kvm", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm-common" }, "product_reference": "qemu-kvm-common", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-ma as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm-common-ma" }, "product_reference": "qemu-kvm-common-ma", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ma as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm-ma" }, "product_reference": "qemu-kvm-ma", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ma.src as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm-ma.src" }, "product_reference": "qemu-kvm-ma.src", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm-tools" }, "product_reference": "qemu-kvm-tools", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-ma as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm-tools-ma" }, "product_reference": "qemu-kvm-tools-ma", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm.src as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:qemu-kvm.src" }, "product_reference": "qemu-kvm.src", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-guest-agent::virt:rhel" }, "product_reference": "qemu-guest-agent::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-img::virt:rhel" }, "product_reference": "qemu-img::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-curl (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-block-curl::virt:rhel" }, "product_reference": "qemu-kvm-block-curl::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-gluster (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-block-gluster::virt:rhel" }, "product_reference": "qemu-kvm-block-gluster::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-iscsi (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-block-iscsi::virt:rhel" }, "product_reference": "qemu-kvm-block-iscsi::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-rbd (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-block-rbd::virt:rhel" }, "product_reference": "qemu-kvm-block-rbd::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-ssh (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-block-ssh::virt:rhel" }, "product_reference": "qemu-kvm-block-ssh::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-common::virt:rhel" }, "product_reference": "qemu-kvm-common::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-core (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-core::virt:rhel" }, "product_reference": "qemu-kvm-core::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-docs (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-docs::virt:rhel" }, "product_reference": "qemu-kvm-docs::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-hw-usbredir (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-hw-usbredir::virt:rhel" }, "product_reference": "qemu-kvm-hw-usbredir::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tests (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-tests::virt:rhel" }, "product_reference": "qemu-kvm-tests::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ui-opengl (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-ui-opengl::virt:rhel" }, "product_reference": "qemu-kvm-ui-opengl::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ui-spice (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm-ui-spice::virt:rhel" }, "product_reference": "qemu-kvm-ui-spice::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm.src (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm.src::virt:rhel" }, "product_reference": "qemu-kvm.src::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm (virt:rhel) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:qemu-kvm::virt:rhel" }, "product_reference": "qemu-kvm::virt:rhel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-guest-agent" }, "product_reference": "qemu-guest-agent", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-img" }, "product_reference": "qemu-img", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm" }, "product_reference": "qemu-kvm", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-audio-pa as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-audio-pa" }, "product_reference": "qemu-kvm-audio-pa", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-blkio as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-block-blkio" }, "product_reference": "qemu-kvm-block-blkio", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-curl as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-block-curl" }, "product_reference": "qemu-kvm-block-curl", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-block-rbd as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-block-rbd" }, "product_reference": "qemu-kvm-block-rbd", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-common" }, "product_reference": "qemu-kvm-common", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-core as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-core" }, "product_reference": "qemu-kvm-core", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu" }, "product_reference": "qemu-kvm-device-display-virtio-gpu", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu-ccw as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-ccw" }, "product_reference": "qemu-kvm-device-display-virtio-gpu-ccw", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu-gl as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-gl" }, "product_reference": "qemu-kvm-device-display-virtio-gpu-gl", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu-pci as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci" }, "product_reference": "qemu-kvm-device-display-virtio-gpu-pci", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-gpu-pci-gl as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci-gl" }, "product_reference": "qemu-kvm-device-display-virtio-gpu-pci-gl", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-vga as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga" }, "product_reference": "qemu-kvm-device-display-virtio-vga", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-display-virtio-vga-gl as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga-gl" }, "product_reference": "qemu-kvm-device-display-virtio-vga-gl", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-usb-host as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-usb-host" }, "product_reference": "qemu-kvm-device-usb-host", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-device-usb-redirect as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-device-usb-redirect" }, "product_reference": "qemu-kvm-device-usb-redirect", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-docs as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-docs" }, "product_reference": "qemu-kvm-docs", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-tools" }, "product_reference": "qemu-kvm-tools", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ui-egl-headless as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-ui-egl-headless" }, "product_reference": "qemu-kvm-ui-egl-headless", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-ui-opengl as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm-ui-opengl" }, "product_reference": "qemu-kvm-ui-opengl", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-kvm.src" }, "product_reference": "qemu-kvm.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-pr-helper as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:qemu-pr-helper" }, "product_reference": "qemu-pr-helper", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "rhcos as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:rhcos" }, "product_reference": "rhcos", "relates_to_product_reference": "red_hat_openshift_container_platform_4" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "DARKNAVY" ], "organization": "DarkNavyOrg" }, { "names": [ "Mingyuan Luo" ] } ], "cve": "CVE-2026-3195", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2026-03-02T11:23:09.016000+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "red_hat_enterprise_linux_10:qemu-guest-agent", "red_hat_enterprise_linux_10:qemu-img", "red_hat_enterprise_linux_10:qemu-kvm", "red_hat_enterprise_linux_10:qemu-kvm-audio-pa", "red_hat_enterprise_linux_10:qemu-kvm-block-blkio", "red_hat_enterprise_linux_10:qemu-kvm-block-curl", "red_hat_enterprise_linux_10:qemu-kvm-block-rbd", "red_hat_enterprise_linux_10:qemu-kvm-common", "red_hat_enterprise_linux_10:qemu-kvm-core", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_10:qemu-kvm-docs", "red_hat_enterprise_linux_10:qemu-kvm-tools", "red_hat_enterprise_linux_10:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_10:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_10:qemu-kvm.src", "red_hat_enterprise_linux_10:qemu-pr-helper", "red_hat_enterprise_linux_6:qemu-guest-agent", "red_hat_enterprise_linux_6:qemu-guest-agent-win32", "red_hat_enterprise_linux_6:qemu-img", "red_hat_enterprise_linux_6:qemu-kvm", "red_hat_enterprise_linux_6:qemu-kvm-tools", "red_hat_enterprise_linux_6:qemu-kvm.src", "red_hat_enterprise_linux_7:libcacard", "red_hat_enterprise_linux_7:libcacard-devel", "red_hat_enterprise_linux_7:libcacard-tools", "red_hat_enterprise_linux_7:qemu-guest-agent", "red_hat_enterprise_linux_7:qemu-img", "red_hat_enterprise_linux_7:qemu-img-ma", "red_hat_enterprise_linux_7:qemu-kvm", "red_hat_enterprise_linux_7:qemu-kvm-common", "red_hat_enterprise_linux_7:qemu-kvm-common-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma.src", "red_hat_enterprise_linux_7:qemu-kvm-tools", "red_hat_enterprise_linux_7:qemu-kvm-tools-ma", "red_hat_enterprise_linux_7:qemu-kvm.src", "red_hat_enterprise_linux_8:qemu-guest-agent::virt:rhel", "red_hat_enterprise_linux_8:qemu-img::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-curl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-gluster::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-iscsi::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-rbd::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-ssh::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-common::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-core::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-docs::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-hw-usbredir::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-tests::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-opengl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-spice::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm.src::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm::virt:rhel", "red_hat_enterprise_linux_9:qemu-guest-agent", "red_hat_enterprise_linux_9:qemu-img", "red_hat_enterprise_linux_9:qemu-kvm", "red_hat_enterprise_linux_9:qemu-kvm-audio-pa", "red_hat_enterprise_linux_9:qemu-kvm-block-blkio", "red_hat_enterprise_linux_9:qemu-kvm-block-curl", "red_hat_enterprise_linux_9:qemu-kvm-block-rbd", "red_hat_enterprise_linux_9:qemu-kvm-common", "red_hat_enterprise_linux_9:qemu-kvm-core", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_9:qemu-kvm-docs", "red_hat_enterprise_linux_9:qemu-kvm-tools", "red_hat_enterprise_linux_9:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_9:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_9:qemu-kvm.src", "red_hat_enterprise_linux_9:qemu-pr-helper", "red_hat_openshift_container_platform_4:rhcos" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2443817" } ], "notes": [ { "category": "description", "text": "A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.", "title": "Vulnerability description" }, { "category": "summary", "text": "qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for CVE-2024-7730)", "title": "Vulnerability summary" }, { "category": "other", "text": "The `qemu-kvm` packages as shipped with Red Hat Enterprise Linux are not affected by this CVE. The virtio-snd device is disabled at build-time in RHEL, effectively removing the attack surface.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_not_affected": [ "red_hat_enterprise_linux_10:qemu-guest-agent", "red_hat_enterprise_linux_10:qemu-img", "red_hat_enterprise_linux_10:qemu-kvm", "red_hat_enterprise_linux_10:qemu-kvm-audio-pa", "red_hat_enterprise_linux_10:qemu-kvm-block-blkio", "red_hat_enterprise_linux_10:qemu-kvm-block-curl", "red_hat_enterprise_linux_10:qemu-kvm-block-rbd", "red_hat_enterprise_linux_10:qemu-kvm-common", "red_hat_enterprise_linux_10:qemu-kvm-core", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_10:qemu-kvm-docs", "red_hat_enterprise_linux_10:qemu-kvm-tools", "red_hat_enterprise_linux_10:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_10:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_10:qemu-kvm.src", "red_hat_enterprise_linux_10:qemu-pr-helper", "red_hat_enterprise_linux_6:qemu-guest-agent", "red_hat_enterprise_linux_6:qemu-guest-agent-win32", "red_hat_enterprise_linux_6:qemu-img", "red_hat_enterprise_linux_6:qemu-kvm", "red_hat_enterprise_linux_6:qemu-kvm-tools", "red_hat_enterprise_linux_6:qemu-kvm.src", "red_hat_enterprise_linux_7:libcacard", "red_hat_enterprise_linux_7:libcacard-devel", "red_hat_enterprise_linux_7:libcacard-tools", "red_hat_enterprise_linux_7:qemu-guest-agent", "red_hat_enterprise_linux_7:qemu-img", "red_hat_enterprise_linux_7:qemu-img-ma", "red_hat_enterprise_linux_7:qemu-kvm", "red_hat_enterprise_linux_7:qemu-kvm-common", "red_hat_enterprise_linux_7:qemu-kvm-common-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma.src", "red_hat_enterprise_linux_7:qemu-kvm-tools", "red_hat_enterprise_linux_7:qemu-kvm-tools-ma", "red_hat_enterprise_linux_7:qemu-kvm.src", "red_hat_enterprise_linux_8:qemu-guest-agent::virt:rhel", "red_hat_enterprise_linux_8:qemu-img::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-curl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-gluster::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-iscsi::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-rbd::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-ssh::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-common::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-core::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-docs::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-hw-usbredir::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-tests::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-opengl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-spice::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm.src::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm::virt:rhel", "red_hat_enterprise_linux_9:qemu-guest-agent", "red_hat_enterprise_linux_9:qemu-img", "red_hat_enterprise_linux_9:qemu-kvm", "red_hat_enterprise_linux_9:qemu-kvm-audio-pa", "red_hat_enterprise_linux_9:qemu-kvm-block-blkio", "red_hat_enterprise_linux_9:qemu-kvm-block-curl", "red_hat_enterprise_linux_9:qemu-kvm-block-rbd", "red_hat_enterprise_linux_9:qemu-kvm-common", "red_hat_enterprise_linux_9:qemu-kvm-core", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_9:qemu-kvm-docs", "red_hat_enterprise_linux_9:qemu-kvm-tools", "red_hat_enterprise_linux_9:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_9:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_9:qemu-kvm.src", "red_hat_enterprise_linux_9:qemu-pr-helper", "red_hat_openshift_container_platform_4:rhcos" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-3195" }, { "category": "external", "summary": "RHBZ#2443817", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443817" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3195", "url": "https://www.cve.org/CVERecord?id=CVE-2026-3195" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3195", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3195" } ], "release_date": "2026-02-20T00:00:00+00:00", "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "red_hat_enterprise_linux_10:qemu-guest-agent", "red_hat_enterprise_linux_10:qemu-img", "red_hat_enterprise_linux_10:qemu-kvm", "red_hat_enterprise_linux_10:qemu-kvm-audio-pa", "red_hat_enterprise_linux_10:qemu-kvm-block-blkio", "red_hat_enterprise_linux_10:qemu-kvm-block-curl", "red_hat_enterprise_linux_10:qemu-kvm-block-rbd", "red_hat_enterprise_linux_10:qemu-kvm-common", "red_hat_enterprise_linux_10:qemu-kvm-core", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_10:qemu-kvm-docs", "red_hat_enterprise_linux_10:qemu-kvm-tools", "red_hat_enterprise_linux_10:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_10:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_10:qemu-kvm.src", "red_hat_enterprise_linux_10:qemu-pr-helper", "red_hat_enterprise_linux_6:qemu-guest-agent", "red_hat_enterprise_linux_6:qemu-guest-agent-win32", "red_hat_enterprise_linux_6:qemu-img", "red_hat_enterprise_linux_6:qemu-kvm", "red_hat_enterprise_linux_6:qemu-kvm-tools", "red_hat_enterprise_linux_6:qemu-kvm.src", "red_hat_enterprise_linux_7:libcacard", "red_hat_enterprise_linux_7:libcacard-devel", "red_hat_enterprise_linux_7:libcacard-tools", "red_hat_enterprise_linux_7:qemu-guest-agent", "red_hat_enterprise_linux_7:qemu-img", "red_hat_enterprise_linux_7:qemu-img-ma", "red_hat_enterprise_linux_7:qemu-kvm", "red_hat_enterprise_linux_7:qemu-kvm-common", "red_hat_enterprise_linux_7:qemu-kvm-common-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma.src", "red_hat_enterprise_linux_7:qemu-kvm-tools", "red_hat_enterprise_linux_7:qemu-kvm-tools-ma", "red_hat_enterprise_linux_7:qemu-kvm.src", "red_hat_enterprise_linux_8:qemu-guest-agent::virt:rhel", "red_hat_enterprise_linux_8:qemu-img::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-curl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-gluster::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-iscsi::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-rbd::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-ssh::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-common::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-core::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-docs::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-hw-usbredir::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-tests::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-opengl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-spice::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm.src::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm::virt:rhel", "red_hat_enterprise_linux_9:qemu-guest-agent", "red_hat_enterprise_linux_9:qemu-img", "red_hat_enterprise_linux_9:qemu-kvm", "red_hat_enterprise_linux_9:qemu-kvm-audio-pa", "red_hat_enterprise_linux_9:qemu-kvm-block-blkio", "red_hat_enterprise_linux_9:qemu-kvm-block-curl", "red_hat_enterprise_linux_9:qemu-kvm-block-rbd", "red_hat_enterprise_linux_9:qemu-kvm-common", "red_hat_enterprise_linux_9:qemu-kvm-core", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_9:qemu-kvm-docs", "red_hat_enterprise_linux_9:qemu-kvm-tools", "red_hat_enterprise_linux_9:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_9:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_9:qemu-kvm.src", "red_hat_enterprise_linux_9:qemu-pr-helper", "red_hat_openshift_container_platform_4:rhcos" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "red_hat_enterprise_linux_10:qemu-guest-agent", "red_hat_enterprise_linux_10:qemu-img", "red_hat_enterprise_linux_10:qemu-kvm", "red_hat_enterprise_linux_10:qemu-kvm-audio-pa", "red_hat_enterprise_linux_10:qemu-kvm-block-blkio", "red_hat_enterprise_linux_10:qemu-kvm-block-curl", "red_hat_enterprise_linux_10:qemu-kvm-block-rbd", "red_hat_enterprise_linux_10:qemu-kvm-common", "red_hat_enterprise_linux_10:qemu-kvm-core", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_10:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_10:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_10:qemu-kvm-docs", "red_hat_enterprise_linux_10:qemu-kvm-tools", "red_hat_enterprise_linux_10:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_10:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_10:qemu-kvm.src", "red_hat_enterprise_linux_10:qemu-pr-helper", "red_hat_enterprise_linux_6:qemu-guest-agent", "red_hat_enterprise_linux_6:qemu-guest-agent-win32", "red_hat_enterprise_linux_6:qemu-img", "red_hat_enterprise_linux_6:qemu-kvm", "red_hat_enterprise_linux_6:qemu-kvm-tools", "red_hat_enterprise_linux_6:qemu-kvm.src", "red_hat_enterprise_linux_7:libcacard", "red_hat_enterprise_linux_7:libcacard-devel", "red_hat_enterprise_linux_7:libcacard-tools", "red_hat_enterprise_linux_7:qemu-guest-agent", "red_hat_enterprise_linux_7:qemu-img", "red_hat_enterprise_linux_7:qemu-img-ma", "red_hat_enterprise_linux_7:qemu-kvm", "red_hat_enterprise_linux_7:qemu-kvm-common", "red_hat_enterprise_linux_7:qemu-kvm-common-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma", "red_hat_enterprise_linux_7:qemu-kvm-ma.src", "red_hat_enterprise_linux_7:qemu-kvm-tools", "red_hat_enterprise_linux_7:qemu-kvm-tools-ma", "red_hat_enterprise_linux_7:qemu-kvm.src", "red_hat_enterprise_linux_8:qemu-guest-agent::virt:rhel", "red_hat_enterprise_linux_8:qemu-img::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-curl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-gluster::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-iscsi::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-rbd::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-block-ssh::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-common::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-core::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-docs::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-hw-usbredir::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-tests::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-opengl::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm-ui-spice::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm.src::virt:rhel", "red_hat_enterprise_linux_8:qemu-kvm::virt:rhel", "red_hat_enterprise_linux_9:qemu-guest-agent", "red_hat_enterprise_linux_9:qemu-img", "red_hat_enterprise_linux_9:qemu-kvm", "red_hat_enterprise_linux_9:qemu-kvm-audio-pa", "red_hat_enterprise_linux_9:qemu-kvm-block-blkio", "red_hat_enterprise_linux_9:qemu-kvm-block-curl", "red_hat_enterprise_linux_9:qemu-kvm-block-rbd", "red_hat_enterprise_linux_9:qemu-kvm-common", "red_hat_enterprise_linux_9:qemu-kvm-core", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-ccw", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-gpu-pci-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga", "red_hat_enterprise_linux_9:qemu-kvm-device-display-virtio-vga-gl", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-host", "red_hat_enterprise_linux_9:qemu-kvm-device-usb-redirect", "red_hat_enterprise_linux_9:qemu-kvm-docs", "red_hat_enterprise_linux_9:qemu-kvm-tools", "red_hat_enterprise_linux_9:qemu-kvm-ui-egl-headless", "red_hat_enterprise_linux_9:qemu-kvm-ui-opengl", "red_hat_enterprise_linux_9:qemu-kvm.src", "red_hat_enterprise_linux_9:qemu-pr-helper", "red_hat_openshift_container_platform_4:rhcos" ] } ], "title": "qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for CVE-2024-7730)" } ] }