Bug 2537939 (CVE-2026-93834) - CVE-2026-93834 qemu-kvm: 9pfs: use-after-free race in Tlcreate/Twalk allows VM guest escape
Summary: CVE-2026-93834 qemu-kvm: 9pfs: use-after-free race in Tlcreate/Twalk allows V...
Keywords:
Status: NEW
Alias: CVE-2026-93834
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2537961 2537958
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-22 16:18 UTC by Mauro Matteo Cascella
Modified: 2026-09-25 12:55 UTC (History)
24 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Mauro Matteo Cascella 2026-09-22 16:18:01 UTC 
HASH(0x55cdf58ef510)
Comment 2 Mauro Matteo Cascella 2026-09-25 12:55:03 UTC 
Upstream fix:
https://gitlab.com/qemu-project/qemu/-/commit/fe9e30899ffceef25cf345ec83f76546afca19dd
Note You need to log in before you can comment on or make changes to this bug.