Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/qemu-kvm@17:9.0.0-10?arch=el9_5
purl pkg:rpm/redhat/qemu-kvm@17:9.0.0-10?arch=el9_5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.7
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-91y7-ceje-jbd3
Aliases:
CVE-2024-7409
QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure There are no reported fixed by versions.
VCID-ewb7-nrtu-g7ex
Aliases:
CVE-2024-3446
QEMU: virtio: DMA reentrancy issue leads to double free vulnerability There are no reported fixed by versions.
VCID-gmvt-jepe-mugb
Aliases:
CVE-2024-26327
qemu-kvm: pcie: improper validation of NumVFs leads to buffer overflow There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:49:46.882085+00:00 RedHat Importer Affected by VCID-gmvt-jepe-mugb https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-26327.json 38.0.0
2026-04-01T13:48:28.798639+00:00 RedHat Importer Affected by VCID-ewb7-nrtu-g7ex https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3446.json 38.0.0
2026-04-01T13:45:55.115758+00:00 RedHat Importer Affected by VCID-91y7-ceje-jbd3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-7409.json 38.0.0