CVE-2026-48914 is a QEMU/KVM vulnerability disclosed in June 2026 in which malformed virtio-blk SCSI requests from a highly privileged guest can trigger a heap buffer overflow in the host QEMU process, potentially causing denial of service for the affected virtual machine workload. The bug is...