Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:23228 | Mondoo Vulnerability Intelligence

RHSA-2025:23228

HIGH7.5

Red Hat Security Advisory: qemu-kvm security update

Published Dec 18, 2025

Modified 3 weeks ago

Fix available

Affected Packages

Red Hat:rhel_eus:9.4::appstreamqemu-guest-agent

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-guest-agent-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-img

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-img-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-audio-dbus-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-audio-pa

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-audio-pa-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-block-blkio

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-block-blkio-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-block-curl

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-block-curl-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-block-rbd

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-block-rbd-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-common

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-common-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-core

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-core-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-debugsource

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-gpu

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-gpu-ccw

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-gpu-ccw-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-gpu-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-gpu-pci

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-gpu-pci-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-vga

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-display-virtio-vga-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-usb-host

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-usb-host-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-usb-redirect

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-device-usb-redirect-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-docs

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-tests-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-tools

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-tools-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-ui-dbus-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-ui-egl-headless

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-ui-egl-headless-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-ui-opengl

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-kvm-ui-opengl-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-pr-helper

Fixed in:

17:8.2.0-11.el9_4.18

Red Hat:rhel_eus:9.4::appstreamqemu-pr-helper-debuginfo

Fixed in:

17:8.2.0-11.el9_4.18

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:23228 REPORThttps://access.redhat.com/security/cve/CVE-2025-11234 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2401209 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-11234 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23228.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-11234

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2025-11234

Ecosystems

Red Hat rhel_eus 9.4 appstream

Timeline

PublishedDec 18, 2025

ModifiedDec 18, 2025