What is CVE-2026-81627?

CVE-2026-81627 is a medium-severity vulnerability in Red Hat Enterprise Linux 10, classified under Out-of-bounds Write. CVSS score: 6.7/10. Published 2026-09-18.

How severe is CVE-2026-81627?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Buffer overflow in Red Hat Enterprise Linux 10

CVE-2026-81627

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
secalert@redhat.com

Frequently asked questions

What is CVE-2026-81627?: CVE-2026-81627 is a medium-severity vulnerability in Red Hat Enterprise Linux 10, classified under Out-of-bounds Write. CVSS score: 6.7/10. Published 2026-09-18.
How severe is CVE-2026-81627?: Medium severity. CVSS v3 base score is 6.7 out of 10.