SUSE-SU-2026:24115-1: important: Security update for qemu

SLE-SECURITY-UPDATES null at suse.de
Fri Oct 9 20:30:17 UTC 2026 

# Security update for qemu

Announcement ID: SUSE-SU-2026:24115-1  
Release Date: 2026-10-07T10:25:54Z  
Rating: important  
References:

  * bsc#1263864
  * bsc#1279962
  * bsc#1282077
  * bsc#1282578
  * bsc#1282918

  
Cross-References:

  * CVE-2026-81627
  * CVE-2026-93834

  
CVSS scores:

  * CVE-2026-81627 ( SUSE ):  9.3
    CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
  * CVE-2026-81627 ( SUSE ):  8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
  * CVE-2026-81627 ( NVD ):  8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
  * CVE-2026-93834 ( SUSE ):  5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
  * CVE-2026-93834 ( NVD ):  8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  
Affected Products:

  * SUSE Linux Micro 6.2

  
  
An update that solves two vulnerabilities and has three fixes can now be
installed.

## Description:

This update for qemu fixes the following issues:

Security issues fixed:

  * CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup
    hypercall allows a privileged guest user to bypass chipset `D_LCK`
    protection and injecting code into System Management Mode memory
    (bsc#1282077).
  * CVE-2026-93834: hw/9pfs: mutate FID path from main thread only
    (bsc#1282578).

Changes for qemu:

  * Bugfixes:
  * [openSUSE][RPM] spec: drop qemu-ipxe Requires for ppc (bsc#1282918)
  * virtio: fix queue size validation against allocated maximum (bsc#1279962)
  * virtio-mmio: fix QUEUE_NUM_MAX (bsc#1279962)
  * target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864)
  * target/ppc/kvm: Add support for querying host compatibility mode
    (bsc#1263864)
  * linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864)
  * linux-headers: Update to Linux v7.2-rc1 with KVM_S390_VM_CPU_FEAT_ASTFLEIE2
    (bsc#1263864)
  * linux-headers: Update to Linux v7.1-rc4 (bsc#1263864)
  * scripts/update-linux-headers: Add typelimits.h (bsc#1263864)
  * update-linux-headers: Inject VIRTIO_RING_NO_LEGACY in virtio_ring.h
    (bsc#1263864)
  * linux-headers: Add nitro_enclaves.h (bsc#1263864)
  * scripts/update-linux-headers: Add Nitro Enclaves header (bsc#1263864)
  * standard-headers: Update virtio_spi.h from Linux v6.18-rc3 (bsc#1263864)
  * linux-headers: Update to Linux v6.19-rc1 (bsc#1263864)
  * update-linux-headers: Remove "asm-s390/unistd_32.h" (bsc#1263864)
  * linux-headers: Update to Linux v6.18-rc3 (bsc#1263864)
  * linux-headers/linux: Add mshv.h headers (bsc#1263864)
  * include/hw/hyperv: Add MSHV ABI header definitions (bsc#1263864)
  * linux-headers: Update to Linux v6.17-rc1 (bsc#1263864)
  * linux-headers: deal with counted_by annotation (bsc#1263864)
  * linux-headers: Remove the 32-bit arm headers (bsc#1263864)
  * update Linux headers to KVM tree master (bsc#1263864)

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro 6.2  
    zypper in -t patch SUSE-SL-Micro-6.2-1860

## Package List:

  * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64)
    * qemu-guest-agent-10.0.13-160000.2.1
    * qemu-pr-helper-debuginfo-10.0.13-160000.2.1
    * qemu-chardev-spice-debuginfo-10.0.13-160000.2.1
    * qemu-pr-helper-10.0.13-160000.2.1
    * qemu-img-10.0.13-160000.2.1
    * qemu-10.0.13-160000.2.1
    * qemu-debugsource-10.0.13-160000.2.1
    * qemu-block-ssh-debuginfo-10.0.13-160000.2.1
    * qemu-hw-usb-redirect-debuginfo-10.0.13-160000.2.1
    * qemu-ui-opengl-debuginfo-10.0.13-160000.2.1
    * qemu-hw-display-virtio-gpu-pci-debuginfo-10.0.13-160000.2.1
    * qemu-img-debuginfo-10.0.13-160000.2.1
    * qemu-block-ssh-10.0.13-160000.2.1
    * qemu-hw-display-virtio-vga-debuginfo-10.0.13-160000.2.1
    * qemu-audio-spice-10.0.13-160000.2.1
    * qemu-block-iscsi-10.0.13-160000.2.1
    * qemu-ui-spice-core-debuginfo-10.0.13-160000.2.1
    * qemu-audio-spice-debuginfo-10.0.13-160000.2.1
    * qemu-block-iscsi-debuginfo-10.0.13-160000.2.1
    * qemu-hw-display-virtio-gpu-10.0.13-160000.2.1
    * qemu-hw-display-virtio-gpu-debuginfo-10.0.13-160000.2.1
    * qemu-hw-usb-redirect-10.0.13-160000.2.1
    * qemu-hw-usb-host-debuginfo-10.0.13-160000.2.1
    * qemu-chardev-spice-10.0.13-160000.2.1
    * qemu-hw-display-qxl-debuginfo-10.0.13-160000.2.1
    * qemu-ksm-10.0.13-160000.2.1
    * qemu-tools-10.0.13-160000.2.1
    * qemu-tools-debuginfo-10.0.13-160000.2.1
    * qemu-ui-opengl-10.0.13-160000.2.1
    * qemu-guest-agent-debuginfo-10.0.13-160000.2.1
    * qemu-ui-spice-core-10.0.13-160000.2.1
    * qemu-debuginfo-10.0.13-160000.2.1
    * qemu-hw-display-qxl-10.0.13-160000.2.1
    * qemu-hw-display-virtio-gpu-pci-10.0.13-160000.2.1
    * qemu-hw-display-virtio-vga-10.0.13-160000.2.1
    * qemu-hw-usb-host-10.0.13-160000.2.1
  * SUSE Linux Micro 6.2 (noarch)
    * qemu-seabios-10.0.131.16.3_3_g3d33c746-160000.2.1
    * qemu-lang-10.0.13-160000.2.1
    * qemu-ipxe-10.0.13-160000.2.1
    * qemu-vgabios-10.0.131.16.3_3_g3d33c746-160000.2.1
    * qemu-SLOF-10.0.13-160000.2.1
  * SUSE Linux Micro 6.2 (x86_64)
    * qemu-vmsr-helper-10.0.13-160000.2.1
    * qemu-vmsr-helper-debuginfo-10.0.13-160000.2.1
    * qemu-x86-10.0.13-160000.2.1
    * qemu-x86-debuginfo-10.0.13-160000.2.1
  * SUSE Linux Micro 6.2 (aarch64)
    * qemu-arm-10.0.13-160000.2.1
    * qemu-arm-debuginfo-10.0.13-160000.2.1
  * SUSE Linux Micro 6.2 (ppc64le)
    * qemu-ppc-10.0.13-160000.2.1
    * qemu-ppc-debuginfo-10.0.13-160000.2.1
  * SUSE Linux Micro 6.2 (s390x)
    * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-10.0.13-160000.2.1
    * qemu-hw-s390x-virtio-gpu-ccw-10.0.13-160000.2.1
    * qemu-s390x-debuginfo-10.0.13-160000.2.1
    * qemu-s390x-10.0.13-160000.2.1

## References:

  * https://www.suse.com/security/cve/CVE-2026-81627.html
  * https://www.suse.com/security/cve/CVE-2026-93834.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1263864
  * https://bugzilla.suse.com/show_bug.cgi?id=1279962
  * https://bugzilla.suse.com/show_bug.cgi?id=1282077
  * https://bugzilla.suse.com/show_bug.cgi?id=1282578
  * https://bugzilla.suse.com/show_bug.cgi?id=1282918

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20261009/73410189/attachment.htm>

More information about the sle-security-updates mailing list