
CVE catalog
CVE-2026-3886
qemu affected and fixed versions
[virtio-gpu: fix overflow check when allocating 2d image]
- Severity
- High · CVSS 8.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "qemu",
"status": "fixed",
"release": "sid",
"version": "1:11.1.2+ds-3"
},
{
"name": "qemu",
"status": "fixed",
"release": "forky",
"version": "1:11.1.2+ds-3"
},
{
"name": "qemu",
"status": "fixed",
"release": "trixie",
"version": "1:10.0.13+ds-0+deb13u1"
},
{
"name": "qemu",
"status": "vulnerable",
"release": "trixie-security",
"version": "1:10.0.2+ds-2+deb13u1"
},
{
"name": "qemu",
"status": "not affected",
"release": "bookworm",
"version": "1:7.2+dfsg-7+deb12u18"
},
{
"name": "qemu",
"status": "not affected",
"release": "bookworm-security",
"version": "1:7.2+dfsg-7+deb12u15"
}
],
"fixed_versions": [
{
"bug": null,
"name": "qemu",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "1:11.0.0+ds-1"
},
{
"bug": null,
"name": "qemu",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "1:11.0.0+ds-1"
},
{
"bug": null,
"name": "qemu",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "1:10.0.10+ds-0+deb13u1"
},
{
"bug": null,
"name": "qemu",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "unimportant",
"fixed_version": "0"
}
],
"distribution_packages": [
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.2.10-4.1"
}
]
}
],
"release": "linux micro 6.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "8.2.10-4.1",
"provider_record_id": "SUSE-SU-2026:23362-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.2.10-slfo.1.1_6.1"
}
]
}
],
"release": "linux micro 6.1",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "8.2.10-slfo.1.1_6.1",
"provider_record_id": "SUSE-SU-2026:23351-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.2.10-150600.3.52.1"
}
]
}
],
"release": "linux enterprise server 15 sp6-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "8.2.10-150600.3.52.1",
"provider_record_id": "SUSE-SU-2026:3806-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.2.10-150600.3.52.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "8.2.10-150600.3.52.1",
"provider_record_id": "SUSE-SU-2026:3806-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.2.4-150700.3.23.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp7",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "9.2.4-150700.3.23.1",
"provider_record_id": "SUSE-SU-2026:3038-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.2.4-150700.3.23.1"
}
]
}
],
"release": "linux enterprise module for package hub 15 sp7",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "9.2.4-150700.3.23.1",
"provider_record_id": "SUSE-SU-2026:3038-1"
},
{
"name": "qemu-linux-user",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.2.4-150700.3.23.1"
}
]
}
],
"release": "linux enterprise module for package hub 15 sp7",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "9.2.4-150700.3.23.1",
"provider_record_id": "SUSE-SU-2026:3038-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.2.4-150700.3.23.1"
}
]
}
],
"release": "linux enterprise module for server applications 15 sp7",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "9.2.4-150700.3.23.1",
"provider_record_id": "SUSE-SU-2026:3038-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.11-160000.1.1"
}
]
}
],
"release": "linux enterprise server 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "10.0.11-160000.1.1",
"provider_record_id": "SUSE-SU-2026:22576-1"
},
{
"name": "qemu-linux-user",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.11-160000.1.1"
}
]
}
],
"release": "linux enterprise server 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "10.0.11-160000.1.1",
"provider_record_id": "SUSE-SU-2026:22576-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.11-160000.1.1"
}
]
}
],
"release": "linux enterprise server for sap applications 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "10.0.11-160000.1.1",
"provider_record_id": "SUSE-SU-2026:22576-1"
},
{
"name": "qemu-linux-user",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.11-160000.1.1"
}
]
}
],
"release": "linux enterprise server for sap applications 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "10.0.11-160000.1.1",
"provider_record_id": "SUSE-SU-2026:22576-1"
},
{
"name": "qemu",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.11-160000.1.1"
}
]
}
],
"release": "linux micro 6.2",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "10.0.11-160000.1.1",
"provider_record_id": "SUSE-SU-2026:22550-1"
},
{
"name": "qemu",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.11-160000.1.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "10.0.11-160000.1.1",
"provider_record_id": "OPENSUSE-SU-2026:21253-1"
},
{
"name": "qemu-linux-user",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.11-160000.1.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "10.0.11-160000.1.1",
"provider_record_id": "OPENSUSE-SU-2026:21253-1"
},
{
"name": "qemu",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "24.04",
"versions": [
"1:8.0.4+dfsg-1ubuntu3",
"1:8.0.4+dfsg-1ubuntu4",
"1:8.0.4+dfsg-1ubuntu5",
"1:8.1.3+ds-1ubuntu2",
"1:8.2.1+ds-1ubuntu1",
"1:8.2.1+ds-1ubuntu8",
"1:8.2.1+ds-1ubuntu9",
"1:8.2.2+ds-0ubuntu1",
"1:8.2.2+ds-0ubuntu1.2",
"1:8.2.2+ds-0ubuntu1.4",
"1:8.2.2+ds-0ubuntu1.5",
"1:8.2.2+ds-0ubuntu1.6",
"1:8.2.2+ds-0ubuntu1.7",
"1:8.2.2+ds-0ubuntu1.8",
"1:8.2.2+ds-0ubuntu1.9",
"1:8.2.2+ds-0ubuntu1.10",
"1:8.2.2+ds-0ubuntu1.11",
"1:8.2.2+ds-0ubuntu1.12",
"1:8.2.2+ds-0ubuntu1.13",
"1:8.2.2+ds-0ubuntu1.14",
"1:8.2.2+ds-0ubuntu1.15",
"1:8.2.2+ds-0ubuntu1.16",
"1:8.2.2+ds-0ubuntu1.17",
"1:8.2.2+ds-0ubuntu1.18"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-3886"
},
{
"name": "qemu",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "25.10",
"versions": [
"1:9.2.1+ds-1ubuntu5",
"1:10.0.2+ds-1ubuntu1",
"1:10.0.2+ds-1ubuntu2",
"1:10.1.0+ds-1ubuntu1",
"1:10.1.0+ds-5ubuntu1",
"1:10.1.0+ds-5ubuntu2",
"1:10.1.0+ds-5ubuntu2.1",
"1:10.1.0+ds-5ubuntu2.2",
"1:10.1.0+ds-5ubuntu2.4",
"1:10.1.0+ds-5ubuntu2.5",
"1:10.1.0+ds-5ubuntu2.6",
"1:10.1.0+ds-5ubuntu2.7"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-3886"
},
{
"name": "qemu",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"1:10.2.1+ds-1ubuntu3",
"1:10.2.1+ds-1ubuntu6",
"1:11.0.3+ds-2ubuntu1",
"1:11.0.3+ds-2ubuntu2"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-3886"
},
{
"name": "qemu-hwe",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.10",
"versions": [
"1:10.2.1+ds-1ubuntu4",
"1:10.2.1+ds-1ubuntu7",
"1:10.2.1+ds-1ubuntu8",
"1:11.0.3+ds-2ubuntu2",
"1:11.0.3+ds-2ubuntu4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-3886"
},
{
"name": "qemu",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"1:10.1.0+ds-5ubuntu2",
"1:10.1.0+ds-5ubuntu3",
"1:10.1.0+ds-5ubuntu4",
"1:10.1.0+ds-5ubuntu5",
"1:10.2.1+ds-1ubuntu1",
"1:10.2.1+ds-1ubuntu2",
"1:10.2.1+ds-1ubuntu3",
"1:10.2.1+ds-1ubuntu3.1",
"1:10.2.1+ds-1ubuntu3.2",
"1:10.2.1+ds-1ubuntu3.3"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-3886"
},
{
"name": "qemu-hwe",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "26.04",
"versions": [
"1:10.2.1+ds-1ubuntu2",
"1:10.2.1+ds-1ubuntu4",
"1:10.2.1+ds-1ubuntu4.2",
"1:10.2.1+ds-1ubuntu4.3",
"1:10.2.1+ds-1ubuntu4.4"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2026-3886"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [qemu-block-extra]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-guest-agent]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-arm]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-common]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-data]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18· all · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18· all · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· all · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· all · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· all · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· all · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-gui]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-mips]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-misc]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-modules-opengl]Unknown
Source package: [qemu]
Details (2)
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
- [qemu-system-modules-spice]Unknown
Source package: [qemu]
Details (2)
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
- [qemu-system-ppc]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-riscv]Unknown
Source package: [qemu]
Details (2)
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
- [qemu-system-s390x]Unknown
Source package: [qemu]
Details (2)
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
- [qemu-system-sparc]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-x86]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-system-xen]Unknown
Source package: [qemu]
Details (3)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-user]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-user-binfmt]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
- [qemu-user-static]Unknown
Source package: [qemu]
Details (6)
1:7.2+dfsg-7+deb12u18+b3· amd64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u18+b3· arm64 · bookwormNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· amd64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:10.0.2+ds-2+deb13u1~bpo12+1· arm64 · bookworm-backportsNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· amd64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
1:7.2+dfsg-7+deb12u15· arm64 · bookworm-securityNot affected
dsa · qemu · debian · bookworm
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22550-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-3886]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22550-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22576-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23351-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23362-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3038-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3806-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-3886]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21253-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-3886]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1855.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]