https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T13:16:26.068852+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-81627 fkie_cve-2026-81627 2026-10-02T13:16:26.138186+00:00

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.

 https://db.gcve.eu/vuln/ghsa-x7v7-qcr5-q66r GHSA-x7v7-qcr5-q66r 2026-10-02T13:16:26.138286+00:00

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-81627 UBUNTU-CVE-2026-81627 2026-10-02T13:16:26.138319+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu, Ubuntu:26.04:LTS: qemu, Ubuntu:26.04:LTS: qemu-hwe

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.