[Git][security-tracker-team/security-tracker][master] Add CVE-2026-3196/qemu

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Mar 3 07:16:55 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8cf9f1cc by Salvatore Bonaccorso at 2026-03-03T08:16:18+01:00
Add CVE-2026-3196/qemu

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -186663,6 +186663,10 @@ CVE-2024-20083 (In venc, there is a possible out of bounds write due to a missin
 	NOT-FOR-US: Mediatek
 CVE-2024-20082 (In Modem, there is a possible memory corruption due to a missing bound ...)
 	NOT-FOR-US: Mediatek
+CVE-2026-3196
+	- qemu <unfixed>
+	NOTE: https://lore.kernel.org/qemu-devel/20260220-virtio-snd-series-v1-0-207c4f7200a2@linaro.org/
+	NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/61679d7dcfa2dffc8fb115aa19b09e0e7cf5ea5c
 CVE-2026-3195
 	- qemu <unfixed>
 	[bookworm] - qemu <not-affected> (Incomplete fix for CVE-2024-7730 not applied)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cf9f1ccdf524061aa7ef65e3344580eef46156f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cf9f1ccdf524061aa7ef65e3344580eef46156f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260303/5781abae/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list