An update for qemu is now available for openEuler-22.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3273 Final 1.0 1.0 2026-08-07 Initial 2026-08-07 2026-08-07 openEuler SA Tool V1.0 2026-08-07 qemu security update An update for qemu is now available for openEuler-22.03-LTS-SP4 QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A security vulnerability exists in QEMU, the details of which have not been fully disclosed.(CVE-2026-15578) CVE-2026-15705 is an undisclosed vulnerability in QEMU. The vulnerability has been identified in QEMU, but specific technical details and impact scope have not yet been publicly disclosed.(CVE-2026-15705) A security vulnerability exists in QEMU. Detailed vulnerability information has not yet been disclosed. This vulnerability affects all versions.(CVE-2026-16043) In the Linux kernel, the following vulnerabilities have been addressed: bpf: Support hardened BPF for JIT injection. The JIT allocator packages many small programs into larger executable allocations and reuses space in these allocations, loading and freeing them just like programs. When new code is written to the space of the previous code, the program is occupied, and indirect jumps to the new program can reuse the oracles left by the old oracles in the branch. Flush indirect branch predictors before reusing JIT memory so that indirect jumps to a newly written program do not reuse predictions from an old program that occupies the same space. Introduced bpf_arch_pred_flush_enabled static key and bpf_arch_pred_flush static call for refreshing the branch predictor of JIT memory reuse. Schemas that need to be refreshed can update them with the predictor refresh function. By default, it is a NOP and no CALLs will be issued. Allocations larger than the package are not covered by this flush. That's safe because the cBPF program (unprivileged attack surface) is well constrained below the package size. If this assumption is violated, a warning is issued while flushing is active.(CVE-2026-61475) An undisclosed vulnerability exists in QEMU, with no detailed vulnerability description available at this time.(CVE-2026-63319) An undisclosed vulnerability exists in QEMU. Currently, only limited vulnerability information is available, and the specific impact scope and details have not been publicly disclosed.(CVE-2026-8348) An undisclosed vulnerability exists in QEMU, the details of which have not yet been publicly disclosed.(CVE-2026-9238) An update for qemu is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High qemu https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-15578 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-15705 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-16043 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-61475 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63319 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-8348 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-9238 https://nvd.nist.gov/vuln/detail/CVE-2026-15578 https://nvd.nist.gov/vuln/detail/CVE-2026-15705 https://nvd.nist.gov/vuln/detail/CVE-2026-16043 https://nvd.nist.gov/vuln/detail/CVE-2026-61475 https://nvd.nist.gov/vuln/detail/CVE-2026-63319 https://nvd.nist.gov/vuln/detail/CVE-2026-8348 https://nvd.nist.gov/vuln/detail/CVE-2026-9238 openEuler-22.03-LTS-SP4 qemu-6.2.0-117.oe2203sp4.aarch64.rpm qemu-block-curl-6.2.0-117.oe2203sp4.aarch64.rpm qemu-block-iscsi-6.2.0-117.oe2203sp4.aarch64.rpm qemu-block-rbd-6.2.0-117.oe2203sp4.aarch64.rpm qemu-block-ssh-6.2.0-117.oe2203sp4.aarch64.rpm qemu-debuginfo-6.2.0-117.oe2203sp4.aarch64.rpm qemu-debugsource-6.2.0-117.oe2203sp4.aarch64.rpm qemu-guest-agent-6.2.0-117.oe2203sp4.aarch64.rpm qemu-hw-usb-host-6.2.0-117.oe2203sp4.aarch64.rpm qemu-img-6.2.0-117.oe2203sp4.aarch64.rpm qemu-system-aarch64-6.2.0-117.oe2203sp4.aarch64.rpm qemu-system-arm-6.2.0-117.oe2203sp4.aarch64.rpm qemu-system-riscv-6.2.0-117.oe2203sp4.aarch64.rpm qemu-system-x86_64-6.2.0-117.oe2203sp4.aarch64.rpm qemu-6.2.0-117.oe2203sp4.src.rpm qemu-6.2.0-117.oe2203sp4.x86_64.rpm qemu-block-curl-6.2.0-117.oe2203sp4.x86_64.rpm qemu-block-iscsi-6.2.0-117.oe2203sp4.x86_64.rpm qemu-block-rbd-6.2.0-117.oe2203sp4.x86_64.rpm qemu-block-ssh-6.2.0-117.oe2203sp4.x86_64.rpm qemu-debuginfo-6.2.0-117.oe2203sp4.x86_64.rpm qemu-debugsource-6.2.0-117.oe2203sp4.x86_64.rpm qemu-guest-agent-6.2.0-117.oe2203sp4.x86_64.rpm qemu-hw-usb-host-6.2.0-117.oe2203sp4.x86_64.rpm qemu-img-6.2.0-117.oe2203sp4.x86_64.rpm qemu-seabios-6.2.0-117.oe2203sp4.x86_64.rpm qemu-system-aarch64-6.2.0-117.oe2203sp4.x86_64.rpm qemu-system-arm-6.2.0-117.oe2203sp4.x86_64.rpm qemu-system-riscv-6.2.0-117.oe2203sp4.x86_64.rpm qemu-system-x86_64-6.2.0-117.oe2203sp4.x86_64.rpm qemu-help-6.2.0-117.oe2203sp4.noarch.rpm A security vulnerability exists in QEMU, the details of which have not been fully disclosed. 2026-08-07 CVE-2026-15578 openEuler-22.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H qemu security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273 CVE-2026-15705 is an undisclosed vulnerability in QEMU. The vulnerability has been identified in QEMU, but specific technical details and impact scope have not yet been publicly disclosed. 2026-08-07 CVE-2026-15705 openEuler-22.03-LTS-SP4 Medium 6.4 AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H qemu security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273 A security vulnerability exists in QEMU. Detailed vulnerability information has not yet been disclosed. This vulnerability affects all versions. 2026-08-07 CVE-2026-16043 openEuler-22.03-LTS-SP4 High 8.2 AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H qemu security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273 In the Linux kernel, the following vulnerabilities have been addressed: bpf: Support hardened BPF for JIT injection. The JIT allocator packages many small programs into larger executable allocations and reuses space in these allocations, loading and freeing them just like programs. When new code is written to the space of the previous code, the program is occupied, and indirect jumps to the new program can reuse the oracles left by the old oracles in the branch. Flush indirect branch predictors before reusing JIT memory so that indirect jumps to a newly written program do not reuse predictions from an old program that occupies the same space. Introduced bpf_arch_pred_flush_enabled static key and bpf_arch_pred_flush static call for refreshing the branch predictor of JIT memory reuse. Schemas that need to be refreshed can update them with the predictor refresh function. By default, it is a NOP and no CALLs will be issued. Allocations larger than the package are not covered by this flush. That's safe because the cBPF program (unprivileged attack surface) is well constrained below the package size. If this assumption is violated, a warning is issued while flushing is active. 2026-08-07 CVE-2026-61475 openEuler-22.03-LTS-SP4 Medium 5.3 AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H qemu security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273 An undisclosed vulnerability exists in QEMU, with no detailed vulnerability description available at this time. 2026-08-07 CVE-2026-63319 openEuler-22.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H qemu security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273 An undisclosed vulnerability exists in QEMU. Currently, only limited vulnerability information is available, and the specific impact scope and details have not been publicly disclosed. 2026-08-07 CVE-2026-8348 openEuler-22.03-LTS-SP4 Medium 6.5 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H qemu security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273 An undisclosed vulnerability exists in QEMU, the details of which have not yet been publicly disclosed. 2026-08-07 CVE-2026-9238 openEuler-22.03-LTS-SP4 Low 3.8 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L qemu security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3273