[Git][security-tracker-team/security-tracker][master] Add CVE-2026-8348/qemu

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e326999f by Salvatore Bonaccorso at 2026-07-26T17:55:16+02:00
Add CVE-2026-8348/qemu

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,8 @@
+CVE-2026-8348 [hw/9pfs: add xattr FID limit to prevent memory exhaustion]
+	- qemu <unfixed>
+	NOTE: Introduced with: https://gitlab.com/qemu-project/qemu/-/commit/10b468bdc5335b58f610817215f30847c1429f24 (v0.14.0-rc0)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/c57644a542b11e578309b07b3bf7623d566e6a81 (v11.0.3)
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/4f9e9601d0ec69748b2019a34dde148578b2c5a4 (v10.0.12)
 CVE-2026-9238 [hw/9pfs: cap Treaddir allocation]
 	- qemu <unfixed>
 	NOTE: Introduced with: https://gitlab.com/qemu-project/qemu/-/commit/2149675b195f2d9a1a4e3b966d45aba234def69b (v5.2.0-rc0)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e326999fedac2c2e72bbe825e01345ab29a4d4bb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e326999fedac2c2e72bbe825e01345ab29a4d4bb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260726/73cd21f5/attachment-0001.htm>