Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

SUSE 15 SP7 QEMU Advanced Unbounded Resource Risk SUSE-SU-2026-0923-1

suse
Calendar Grey March 6, 2026
Dist Suse Esm H88
Fixes CVE-2025-14876 in qemu with moderate severity; robust patch instructions included for SUSE users.
An update that solves one vulnerability and contains one feature can now be installed.

Summary

## This update for qemu fixes the following issues: Security issue: * CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). Non security issues: * * hw/virtio: Also include md stubs in case CONFIG_VIRTIO_PCI is not set (jsc#PED-14271). * * s390x/pv: prepare for memory devices (jsc#PED-14271). * * s390x/s390-skeys: prepare for memory devices (jsc#PED-14271). * * s390x/s390-stattrib-kvm: prepare for memory devices and sparse memory layouts (jsc#PED-14271). * * s390x/s390-virtio-ccw: prepare for memory devices (jsc#PED-14271). * * s390x/virtio-ccw: add support for virtio based memory devices (jsc#PED-14271). * * s390x: remember the maximum page size (jsc#PED-14271). * * s390x: virtio-mem support (jsc#PED-14271). ## Patch Instructions:

Topics%20covered

Topics Covered

security advisory moderate denial of service SuSE QEMU unbounded allocation

References

* bsc#1255400

* jsc#PED-14271

Cross-

* CVE-2025-14876

CVSS scores:

* CVE-2025-14876 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2025-14876 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-14876 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* Basesystem Module 15-SP7

* Server Applications Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

* SUSE Package Hub 15 15-SP7

An update that solves one vulnerability and contains one feature can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2025-14876.html

Announcement ID: SUSE-SU-2026:0832-1
Release Date: 2026-03-05T16:38:47Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service SuSE QEMU unbounded allocation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here