AZL-113624

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113624.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-113624
Upstream
  • CVE-2026-18448
Published
2026-11-10T19:21:15Z
Modified
2026-11-13T14:17:23Z
Summary
CVE-2026-18448 affecting package qemu 10.1.0-2
Details

EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality.

References

Affected packages

Azure Linux:3 / qemu

Package

Name
qemu
Purl
pkg:rpm/azure-linux/qemu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
10.1.0-2

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113624.json"