---
id: CVE-2026-5165
title: >-
  Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk
  device reset
summary: >-
  A flaw was found in virtio-win, specifically within the VirtIO Block (BLK)
  device. When the device undergoes a reset, it fails to properly manage memory,
  resulting in a use-after-free vulnerability. This issue could allow a local
  attacke…
severity: medium
cvss: 6.7
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-825
vendor: Red Hat
product: virtio-win
affected:
  - virtio-win (all versions)
  - virtio-win
  - virtio-win (all versions)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-03-30T18:05:27.370746Z'
published: '2026-03-30'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:17:53.958Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-5165'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-5165'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2453015'
    label: RHBZ#2453015
  - url: 'https://github.com/virtio-win/kvm-guest-drivers-windows/pull/1493'
tags:
  - cve.org
epss: 0.00111
epssPercentile: 0.01315
ingestedAt: '2026-11-05T22:38:32.038Z'
---

## Overview

A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.

## Affected

- `virtio-win (all versions)`
- `virtio-win`
- `virtio-win (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.