qemu-virtiofsd

Direct Vulnerabilities

Known vulnerabilities in the qemu-virtiofsd package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M CVE-2026-9238	<31:7.2.0-42.el9
M CVE-2026-6425	<31:7.2.0-42.el9
M CVE-2026-8348	<31:7.2.0-42.el9
M CVE-2024-6519	<31:7.2.0-42.el9
M Information Exposure	<31:7.2.0-42.el9
M CVE-2026-48004	<31:7.2.0-42.el9
M CVE-2026-5763	<31:7.2.0-42.el9
M CVE-2026-8343	<31:7.2.0-42.el9
M Heap-based Buffer Overflow	<31:7.2.0-42.el9
M CVE-2026-48002	<31:7.2.0-42.el9
M CVE-2026-48003	<31:7.2.0-42.el9
M Reachable Assertion	<31:7.2.0-37.el9
M Incorrect Provision of Specified Functionality	<31:7.2.0-37.el9
M CVE-2025-8860	<31:7.2.0-37.el9
M CVE-2026-0665	<31:7.2.0-37.el9
M CVE-2024-36357	<31:7.2.0-37.el9
M External Control of Critical State Data	<31:7.2.0-37.el9
M CVE-2025-14876	<31:7.2.0-37.el9
M CVE-2024-36350	<31:7.2.0-37.el9
M Use After Free	<31:7.2.0-37.el9
M Out-of-bounds Read	<31:7.2.0-37.el9
H Out-of-bounds Write	<30:7.2.0-15.el9
H Double Free	<30:7.2.0-15.el9
H Out-of-bounds Write	<30:7.2.0-15.el9
H Out-of-bounds Write	<30:7.2.0-15.el9
M CVE-2024-3447	<30:7.2.0-13.el9
M CVE-2024-24474	<30:7.2.0-11.el9
M Improper Synchronization	<30:7.2.0-11.el9
M Use After Free	<30:7.2.0-11.el9
M NULL Pointer Dereference	<30:7.2.0-11.el9
M Out-of-bounds Write	<30:7.2.0-11.el9
M Divide By Zero	<30:7.2.0-11.el9
M Use After Free	<30:7.2.0-11.el9
H Allocation of Resources Without Limits or Throttling	<30:6.1.1-6.el9
H Use After Free	<30:6.1.1-4.el9
H Buffer Overflow	<30:6.1.1-4.el9
H Buffer Overflow	<30:6.1.1-4.el9
H Missing Release of Resource after Effective Lifetime	<30:6.1.1-4.el9