CVE-2026-5165
A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device.
Published Mar 30, 2026 · updated Jun 17, 2026 · redhat virtio-win
A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 30, 2026 · NIST NVD
Detected
A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.
Jun 17, 2026 · NIST NVD
Updated
A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.
Affected
- cpe redhat/enterprise linux10.0
- cpe redhat/enterprise linux9.0
- cpe redhat/virtio-winversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-5165
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-5165
A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially lea
nvd.nist.gov