CVE-2026-5165
Medium · 6.7CVSS
6.7
EPSS
0.2%
Published
Mar 30, 2026
CISA due date
—
The record
A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-102010 A flaw was found in GCC. CWE-825
- CVE-2026-76891 Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CWE-825
- CVE-2026-76890 Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CWE-825
- CVE-2026-17523 A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged… CWE-825
- CVE-2026-54778 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-825
- CVE-2026-58592 Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its… CWE-825
- CVE-2026-12610 A flaw was found in sssd. CWE-825
- CVE-2026-57435 Nokogiri is an open source XML and HTML library for the Ruby programming language. CWE-825