CVE-2026-9238 Affecting qemu-virtiofsd package, versions <31:7.2.0-42.el9
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-ORACLE9-QEMUVIRTIOFSD-19234880
- published24 Aug 2026
Introduced: 24 Aug 2026
NewCVE-2026-9238 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
How to fix?
Upgrade Oracle:9 qemu-virtiofsd to version 31:7.2.0-42.el9 or higher.
This issue was patched in ELSA-2026-500220.
NVD Description
This vulnerability has not been analyzed by NVD yet.