{"action":"Upgrade qemu to 1:11.1.2+ds-2 or later.","affected":[{"fixed":"1:11.1.2+ds-2","introduced":"0"}],"component":"qemu","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1:11.1.2+ds-2"],"id":"tcs_01M5NTEKD130GG1TGT5Q8TA6EY","modified_at":"2026-11-07T10:00:51.762220927Z","published_at":"2026-08-10T22:17:10.027Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-6426","https://security-tracker.debian.org/tracker/CVE-2026-6426"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-6426#Debian:14/qemu","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-6426"}],"summary":"A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64_t but read by the VMS_VBUFFER load path as a signed int32"}