https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-54567.htmlhttps://patchthecve.com/cve/CVE-2025-54567.htmlWed, 17 Jun 2026 09:40:19 +0000MEDIUM 4.2: hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.https://patchthecve.com/cve/CVE-2025-54566.htmlhttps://patchthecve.com/cve/CVE-2025-54566.htmlWed, 17 Jun 2026 09:40:19 +0000MEDIUM 4.2: hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.https://patchthecve.com/cve/CVE-2024-7730.htmlhttps://patchthecve.com/cve/CVE-2024-7730.htmlWed, 17 Jun 2026 08:20:48 +0000HIGH 7.4: A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue elemenhttps://patchthecve.com/cve/CVE-2024-3447.htmlhttps://patchthecve.com/cve/CVE-2024-3447.htmlWed, 17 Jun 2026 07:44:17 +0000MEDIUM 6.0: A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting ihttps://patchthecve.com/cve/CVE-2024-6519.htmlhttps://patchthecve.com/cve/CVE-2024-6519.htmlWed, 17 Jun 2026 08:18:10 +0000HIGH 8.2: A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.https://patchthecve.com/cve/CVE-2024-8354.htmlhttps://patchthecve.com/cve/CVE-2024-8354.htmlWed, 17 Jun 2026 08:22:25 +0000MEDIUM 5.5: A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.https://patchthecve.com/cve/CVE-2024-6505.htmlhttps://patchthecve.com/cve/CVE-2024-6505.htmlWed, 17 Jun 2026 08:18:08 +0000MEDIUM 6.8: A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This f