Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 431
Alerts This Week
Warning Icon 1 431

SUSE QEMU Important Local Escalation Denial of Service Advisory 2026-3038-1

suse
Calendar Grey July 15, 2026
Scroller Suse
Critical updates for SUSE address three key security flaws in qemu software, enhancing system protection and performance.
A July 2026 security update for QEMU addresses three vulnerabilities, including privilege escalation and heap buffer overflow issues, and provides installation instructions for aff...

Summary

## This update for qemu fixes the following issues * CVE-2026-3886: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability (bsc#1268061). * CVE-2026-48004: heap use-after-free race condition allows a DoS by an unprivileged guest user (bsc#1270133). * CVE-2026-48914: qemu-kvm: Heap Buffer Overflow in virtio-blk SCSI Request Handling (bsc#1268794). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3038=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-3038=1

Topics%20covered

Topics Covered

security advisory denial of service SuSE important local escalation QEMU

References

* bsc#1268061

* bsc#1268794

* bsc#1270133

* jsc#PED-14242

* jsc#PED-14279

Cross-

* CVE-2026-3886

* CVE-2026-48004

* CVE-2026-48914

CVSS scores:

* CVE-2026-3886 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

* CVE-2026-48004 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-48914 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H

* CVE-2026-48914 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H

Affected Products:

* Basesystem Module 15-SP7

* Server Applications Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

* SUSE Package Hub 15 15-SP7

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3038-1
Release Date: 2026-07-15T11:45:32Z
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service SuSE important local escalation QEMU

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.