[El-errata] ELSA-2026-88421 Important: Oracle Linux 9 qemu-kvm security, bug fix, and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-88421

http://linux.oracle.com/errata/ELSA-2026-88421.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
qemu-guest-agent-10.1.0-17.el9_8.9.x86_64.rpm
qemu-img-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-audio-pa-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-block-blkio-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-block-curl-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-block-rbd-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-common-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-core-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-device-usb-host-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-docs-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-tools-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.9.x86_64.rpm
qemu-kvm-ui-opengl-10.1.0-17.el9_8.9.x86_64.rpm
qemu-pr-helper-10.1.0-17.el9_8.9.x86_64.rpm

aarch64:
qemu-guest-agent-10.1.0-17.el9_8.9.aarch64.rpm
qemu-img-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-audio-pa-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-block-blkio-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-block-curl-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-block-rbd-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-common-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-core-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-device-usb-host-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-docs-10.1.0-17.el9_8.9.aarch64.rpm
qemu-kvm-tools-10.1.0-17.el9_8.9.aarch64.rpm
qemu-pr-helper-10.1.0-17.el9_8.9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/qemu-kvm-10.1.0-17.el9_8.9.src.rpm

Related CVEs:

CVE-2026-12080




Description of changes:

[10.1.0-17.el9_8.9]
- kvm-qcow2-Add-keep_data_file-command-line-option.patch [RHEL-164549]
- kvm-qcow2-Simplify-size-round-up-in-co_create_opts.patch [RHEL-164549]
- kvm-iotests-common.filter-Sort-keep_data_file.patch [RHEL-164549]
- kvm-iotests-244-Add-test-cases-for-keep_data_file.patch [RHEL-164549]
- kvm-target-i386-mshv-switch-mmio-pagewalk-to-mshv-mmu.patch [RHEL-283121]
- kvm-target-i386-mshv-add-soft-mmu-for-pagewalk.patch [RHEL-283121]
- kvm-pr-manager-helper-fix-sense-buffer-overflow.patch [RHEL-280223]
- kvm-scsi-increase-sense-buffer-size-in-scsi_SG_IO.patch [RHEL-280223]
- kvm-hw-scsi-disk-move-MIG_EVENT_FAILED-into-a-new-functi.patch [RHEL-280223]
- kvm-qemu-pr-helper-add-PR_HELPER_CLEANUP-for-live-migrat.patch [RHEL-280223]
- kvm-pr-manager-helper-add-PR_HELPER_CLEANUP-command-supp.patch [RHEL-280223]
- kvm-file-posix-forward-PR_HELPER_CLEANUP-commands-to-pr-.patch [RHEL-280223]
- kvm-scsi-clean-up-persistent-reservation-state-after-mig.patch [RHEL-280223]
- kvm-scsi-use-REGISTER-AND-IGNORE-EXISTING-KEY-for-robust.patch [RHEL-280223]
- kvm-scsi-document-PR_HELPER_CLEANUP-command.patch [RHEL-280223]
- Resolves: RHEL-164549
  (qemu-img can't create a qcow2 overlay with 'data_file' feature on top of a file without destroying the original image [rhel-9.8.z])
- Resolves: RHEL-283121
  (Fix pending QEMU issues for L1VH GA - QEMU [rhel-9.8.z])
- Resolves: RHEL-280223
  (live migration of a VM with a scsi3pr to a node that previously held a reservation on that disk fails. [rhel-9.8.z])

[10.1.0-17.el9_8.7]
- kvm-qga-Change-effective-user-group-ID-in-guest-ssh-comm.patch [RHEL-212575]
- Resolves: RHEL-212575
  (CVE-2026-12080 qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys [rhel-9.8.z])