VulnSocial

CVE-2026-5165Disclosure(redhat / enterprise_linux)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.

redhat CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-825

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux
  • virtio-win

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-03-31)
  • 3 total mentions across 2 days

Affected systems

Vendors
redhat
Products
enterprise_linuxvirtio-win

3 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-30: 1Mentions · 2026-03-31: 2Technical Details · 2026-03-30: 1Technical Details · 2026-03-31: 203-3003-31
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-301
Disclosure1
2026-03-312
Disclosure1General1
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5165 A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a… https://www.cve.org/CVERecord?id=CVE-2026-5165 ----- Traducción: Se encontró una f… http://infoflow.cloud`

    Post summary

    The post announces a newly identified vulnerability (CVE‑2026‑5165) in virtio‑win's VirtIO Block device, describing its memory management flaw without providing PoC, exploit details, or patch information.

    0000024
    65 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-5165 A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a… https://www.cve.org/CVERecord?id=CVE-2026-5165

    Post summary

    The passage highlights a memory management flaw in virtio-win's VirtIO Block device that can occur during device resets, but provides no proof of concept, exploit code, active exploitation reports, or patch information.

    00000223
    56.9K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5165 - Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset Intel Report: https://ift.tt/nAyPiep

    Post summary

    Security alert identifies CVE-2026-5165 as a memory‑corruption flaw in virtio-win, linking to an Intel report but providing no PoC, exploit code, or patch information.

    0000041
    280 followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
OSredhatenterprise_linux10.0--
OSredhatenterprise_linux9.0--
Appredhatvirtio-win---

Explore more

Back to dashboardredhat CVEsenterprise_linux vulnerabilities