Debian/qemu: medium 5.5
A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can re
Action: Upgrade qemu to 1:10.0.8+ds-0+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:10.0.8+ds-0+deb13u1 | - |
Fixed versions
| 1:10.0.8+ds-0+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-14876#Debian:13/qemu
- https://security-tracker.debian.org/tracker/CVE-2025-14876
published · modified · JSON