Detections
Analytics
EulerOS Virtualization 2.15.1 : qemu (EulerOS-SA-2026-4791)
critical Nessus Plugin ID 377416
Synopsis
The remote EulerOS Virtualization host is missing multiple security updates.Description
According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use (TOCTOU) file-symlink race. Successful exploitation allows the attacker to gain ownership of arbitrary root-owned files or directories, leading to root access. This vulnerability requires an external management layer (e.g., libvirt) to trigger the affected code path.(CVE-2026-12080)
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third parties as not a valid vulnerability due to the rocker device not falling within the virtualization use case.(CVE-2022-36648)
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.(CVE-2026-48914)
Tenable has extracted the preceding description block directly from the EulerOS Virtualization qemu security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected qemu packages.See Also
Plugin Details
Severity: Critical
ID: 377416
File Name: EulerOS_SA-2026-4791.nasl
Version: 1.1
Type: Local
Family: Huawei Local Security Checks
Published: 11/7/2026
Updated: 11/7/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
Percentile: 96.58
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2022-36648
CVSS v3
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:huawei:euleros:uvp:2.15.1, p-cpe:/a:huawei:euleros:qemu-img, p-cpe:/a:huawei:euleros:qemu
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/uvp_version
Exploit Ease: No known exploits are available
Patch Publication Date: 11/6/2026
Vulnerability Publication Date: 8/22/2023