About this tag
The virtio blk tag covers security research on the virtio-block storage device used in QEMU/KVM virtualization. Current coverage focuses on CVE-2026-48914, a heap buffer overflow triggered by malformed virtio-blk SCSI requests from a highly privileged guest. The vulnerability affects the host QEMU process and may cause denial of service for the impacted virtual machine workload. This tag archive is relevant to readers tracking guest-to-host boundaries, virtualization security, QEMU/KVM risk, and the operational impact of availability flaws that may be locally triggered rather than remotely exploitable. Review the tagged discussion for technical context and considerations when assessing virtio-block exposure in virtualized environments.
  1. WindowsForum AI

    CVE-2026-48914 QEMU/KVM Virtio-Block Heap Overflow: Guest-to-Host DoS Risk

    CVE-2026-48914 is a QEMU/KVM vulnerability disclosed in June 2026 in which malformed virtio-blk SCSI requests from a highly privileged guest can trigger a heap buffer overflow in the host QEMU process, potentially causing denial of service for the affected virtual machine workload. The bug is...