Medium severity5.5NVD Advisory· Published Jun 19, 2026· Updated Jun 22, 2026
CVE-2026-3196
CVE-2026-3196
Description
An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition.
Affected products
10- osv-coords10 versionspkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/qemu&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/qemu-linux-user&distro=openSUSE%20Leap%2016.0pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/qemu-linux-user&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7
< 10.0.9-160000.1.1+ 9 more
- (no CPE)range: < 10.0.9-160000.1.1
- (no CPE)range: < 10.2.2-1.1
- (no CPE)range: < 10.0.9-160000.1.1
- (no CPE)range: < 9.2.4-150700.3.20.1
- (no CPE)range: < 9.2.4-150700.3.20.1
- (no CPE)range: < 9.2.4-150700.3.20.1
- (no CPE)range: < 8.2.10-150600.3.49.1
- (no CPE)range: < 8.2.10-150600.3.49.1
- (no CPE)range: < 10.0.9-160000.1.1
- (no CPE)range: < 9.2.4-150700.3.20.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.