Advisories » MGASA-2026-0109

Updated virtualbox packages fix security vulnerabilities

Publication date: 06 May 2026
Modification date: 06 May 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-35230 , CVE-2026-35242 , CVE-2026-35245 , CVE-2026-35246 , CVE-2026-35247 , CVE-2026-35248 , CVE-2026-35249 , CVE-2026-35250 , CVE-2026-35251

Description

Some security vulnerabilities are fixed by this update; please see the
links.
If you will not update to kernel 6.6.137 flavors, please think in use
dkms-virtualbox package instead of virtualbox-kernel as those packages
have not been updated for previous kernels.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35425
• https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixOVIR
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35230
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35242
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35245
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35246
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35247
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35248
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35249
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35250
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35251

SRPMS

9/core

• virtualbox-7.1.18-1.mga9