RHSA-2026:22147: Low: qemu-kvm security update
Published Jun 1, 2026
·Updated
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.Security Fix(es): qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
120 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
redhat/qemu-kvm<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-guest-agent<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-guest-agent-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-img<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-img-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-debugsource<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-guest-agent<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-guest-agent-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-img<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-img-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-audio-pa<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-audio-pa-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-curl<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-curl-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-rbd<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-rbd-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-ssh-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-common<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-common-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-core<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-core-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-debugsource<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-gl<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-gl-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-pci<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-pci-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-pci-gl<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-pci-gl-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-vga<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-vga-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-vga-gl<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-vga-gl-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-usb-host<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-usb-host-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-usb-redirect<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-usb-redirect-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-docs<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-tests-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-tools<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-tools-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-ui-egl-headless<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-ui-egl-headless-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-ui-opengl<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-ui-opengl-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-pr-helper<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-pr-helper-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-guest-agent<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-guest-agent-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-img<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-img-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-audio-pa<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-audio-pa-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-block-curl<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-block-curl-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-block-rbd<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-block-rbd-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-block-ssh-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-common<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-common-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-core<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-core-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-debugsource<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu-gl<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu-gl-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu-pci<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu-pci-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu-pci-gl<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-display-virtio-gpu-pci-gl-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-usb-host<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-device-usb-host-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-docs<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-tests-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-tools<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-kvm-tools-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-pr-helper<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-pr-helper-debuginfo<6.2.0-11.el9_0.10.aa
6.2.0-11.el9_0.10.aa
redhat/qemu-guest-agent<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-guest-agent-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-img<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-img-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-audio-pa<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-audio-pa-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-curl<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-curl-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-rbd<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-rbd-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-block-ssh-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-common<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-common-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-core<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-core-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-debugsource<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-ccw<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-ccw-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-gl<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-display-virtio-gpu-gl-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-usb-host<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-device-usb-host-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-docs<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-tests-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-tools<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-kvm-tools-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-pr-helper<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
redhat/qemu-pr-helper-debuginfo<6.2.0-11.el9_0.10
6.2.0-11.el9_0.10
Remediation
Event History
Jun 1, 2026
Advisory Published
via Red Hat·01:05 AM
Data Sourced
via Red Hat·01:05 AM
DescriptionSeverityAffected Software
Jun 5, 2026
Advisory Published
via Red Hat·01:32 AM
Data Sourced
via Red Hat·01:32 AM
Remedy
Frequently Asked Questions
1
What is the severity of RHSA-2026:22147?
The severity of RHSA-2026:22147 is classified as low.
2
What vulnerability does RHSA-2026:22147 address?
RHSA-2026:22147 addresses a use-after-free vulnerability in the VNC WebSocket handshake, identified by CVE-2025-11234.
3
How do I fix RHSA-2026:22147?
To fix RHSA-2026:22147, you need to apply the provided security update for the qemu-kvm packages.
4
What components are affected by RHSA-2026:22147?
RHSA-2026:22147 affects the qemu-kvm packages along with associated components like qemu-guest-agent and qemu-img.
5
Is the use-after-free issue in RHSA-2026:22147 critical?
The use-after-free issue in RHSA-2026:22147 is classified as low severity, indicating a lower risk to systems.