# Red Hat Enterprise Linux 8 Advanced Virtualization. Every CVE that names Red Hat Enterprise Linux 8 Advanced Virtualization among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback](https://agentprime.io/advisories/CVE-2025-8860.md) `CVE-2025-8860` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-212 - [Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service](https://agentprime.io/advisories/CVE-2025-47711.md) `CVE-2025-47711` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: CWE-193 - [Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service](https://agentprime.io/advisories/CVE-2025-47712.md) `CVE-2025-47712` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()](https://agentprime.io/advisories/CVE-2024-7730.md) `CVE-2024-7730` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()](https://agentprime.io/advisories/CVE-2024-3447.md) `CVE-2024-3447` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-6519.md) `CVE-2024-6519` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2024 · Tags: Memory corruption - [Qemu-kvm: information leak in virtio devices](https://agentprime.io/advisories/CVE-2024-8612.md) `CVE-2024-8612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.8 Low · Not analysed yet · Published 20 Sept 2024 · Tags: Information disclosure - [Qemu-kvm: usb: assertion failure in usb_ep_get()](https://agentprime.io/advisories/CVE-2024-8354.md) `CVE-2024-8354` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Denial of service - [Libvirt: crash of virtinterfaced via virconnectlistinterfaces()](https://agentprime.io/advisories/CVE-2024-8235.md) `CVE-2024-8235` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: Memory corruption - [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md) `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662 - [Libnbd: nbd server improper certificate validation](https://agentprime.io/advisories/CVE-2024-7383.md) `CVE-2024-7383` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.4 High · Not analysed yet · Published 5 Aug 2024 · Tags: Weak cryptography or TLS - [Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss](https://agentprime.io/advisories/CVE-2024-6505.md) `CVE-2024-6505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: Memory corruption - [Qemu-kvm: 'qemu-img info' leads to host file read/write](https://agentprime.io/advisories/CVE-2024-4467.md) `CVE-2024-4467` · CVE record: Red Hat Advanced Virtualization for RHEL 8.2.1 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption - [Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash](https://agentprime.io/advisories/CVE-2024-4693.md) `CVE-2024-4693` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-672 - [Libvirt: stack use-after-free in virnetclientioeventloop()](https://agentprime.io/advisories/CVE-2024-4418.md) `CVE-2024-4418` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 8 May 2024 · Tags: CWE-562 - [Qemu-kvm: net: assertion failure in update_sctp_checksum()](https://agentprime.io/advisories/CVE-2024-3567.md) `CVE-2024-3567` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Denial of service - [Qemu: virtio: dma reentrancy issue leads to double free vulnerability](https://agentprime.io/advisories/CVE-2024-3446.md) `CVE-2024-3446` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption - [Libvirt: negative g_new0 length can lead to unbounded memory allocation](https://agentprime.io/advisories/CVE-2024-2494.md) `CVE-2024-2494` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: Denial of service - [Libvirt: null pointer dereference in udevconnectlistallinterfaces()](https://agentprime.io/advisories/CVE-2024-2496.md) `CVE-2024-2496` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 18 Mar 2024 · Tags: Memory corruption - [Libvirt: off-by-one error in udevlistinterfacesbystatus()](https://agentprime.io/advisories/CVE-2024-1441.md) `CVE-2024-1441` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-193 - [Qemu: vnc: null pointer dereference in qemu_clipboard_request()](https://agentprime.io/advisories/CVE-2023-6683.md) `CVE-2023-6683` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption - [Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()](https://agentprime.io/advisories/CVE-2023-6693.md) `CVE-2023-6693` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption - [Qemu: improper ide controller reset can lead to mbr overwrite](https://agentprime.io/advisories/CVE-2023-5088.md) `CVE-2023-5088` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-821 - [Libnbd: crash or misbehaviour when nbd server returns an unexpected block size](https://agentprime.io/advisories/CVE-2023-5215.md) `CVE-2023-5215` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2023 · Tags: CWE-241 - [Dma reentrancy issue (incomplete fix for cve-2021-3750)](https://agentprime.io/advisories/CVE-2023-2680.md) `CVE-2023-2680` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2023 · Tags: Memory corruption - [Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service](https://agentprime.io/advisories/CVE-2023-3255.md) `CVE-2023-3255` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service - [Triggerable assertion due to race condition in hot-unplug](https://agentprime.io/advisories/CVE-2023-3301.md) `CVE-2023-3301` · CVE record: qemu and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service - [Out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4135.md) `CVE-2023-4135` · CVE record: qemu-kvm and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: Memory corruption - [Heap buffer overflow in virtio_crypto_sym_op_helper()](https://agentprime.io/advisories/CVE-2023-3180.md) `CVE-2023-3180` · CVE record: qemu and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption - [Qemu: 9pfs: suid/sgid bits not dropped on file write](https://agentprime.io/advisories/CVE-2023-1386.md) `CVE-2023-1386` · CVE record: qemu and 4 more · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-281 - [Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service](https://agentprime.io/advisories/CVE-2023-3750.md) `CVE-2023-3750` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-667 - [Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()](https://agentprime.io/advisories/CVE-2023-3019.md) `CVE-2023-3019` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md) `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .