This release has been tracked in v53.0 group of our roadmap project. Snapshot/Restore and Live Migration Improvements An offloaded snapshot/restore daemon has been introduced, allowing snapshot and restore to be carried out by an external process. The live migration protocol has been extended so page faults can be serviced from the source. This enables postcopy for remote live migration and on-dem…
This release has been tracked in v52.0 group of our roadmap project. Security Fixes This release fixes a use-after-free vulnerability in the virtio-block async I/O completion path (#8220). Details can be found in GHSA-f47p-p25q-83rh (CVE-2026-45782). Confidential VM Support: KVM SEV-SNP AMD SEV-SNP confidential VMs can now be launched on KVM in addition to MSHV. Cloud Hypervisor uses guest_memfd t…
This is a point release containing security fixes to a use-after-free vulnerability in the virtio-block async I/O completion path (#8220). Details can be found in GHSA-f47p-p25q-83rh (CVE-2026-45782).
This is a bug fix release. The following issues have been addressed: Fix image_type in OpenAPI definition (#7734)
This is a bug fix release. The following issues have been addressed: Fix image_type in OpenAPI definition (#7734)
This is a point release containing security fixes and bug fixes. Security Fixes This release fixes a security vulnerability in disk image handling. Details can be found in GHSA-jmr4-g2hv-mjj6. A new backing_files=on|off option has been added to --disk to explicitly control whether QCOW2 backing files are permitted. This defaults to off to prevent the loading of backing files entirely. (#7685) Expl…
This release has been tracked in v51.0 group of our roadmap project. Security Fixes This release fixes a security vulnerability in disk image handling. Details can be found in GHSA-jmr4-g2hv-mjj6. A new backing_files=on|off option has been added to --disk to explicitly control whether QCOW2 backing files are permitted. This defaults to off to prevent the loading of backing files entirely. (#7685)…
This release has been tracked in v50.0 group of our roadmap project. Configurable Nested Virtualization Option on x86_64 The nested=on|off option has been added to --cpu to allow users to configure nested virtualization support in the guest on x86_64 hosts (for both KVM and MSHV). The default value is on to maintain consistency with existing behavior. (#7408) Compression Support for QCOW2 QCOW2 su…
This release has been tracked in v49.0 group of our roadmap project. MSHV Support Improvements On AArch64 with MSHV, firmware boot (#7391) and graceful guest shutdown (#7354) are now supported, and CI coverage has been added (#7381). Logging Improvements Logs now use an improved timestamp format (#7355), emit an explicit message on graceful shutdown (#7346), and reduce noisy warnings with newer gu…
This release has been tracked in v48.0 group of our roadmap project. Experimental fw_cfg Device Support This feature enables passing configuration data and files, such as VM boot configurations (kernel, kernel cmdline, e820 memory map, and ACPI tables), from the host to the guest. (#7117) Experimental ivshmem Device Support Support for inter-VM shared memory has been added. For more information, p…
This release has been tracked in v47.0 group of our roadmap project. Block Device Error Reporting to the Guest Instead of exiting on I/O errors, the virtio-block device now reports errors to the guest using VIRTIO_BLK_S_IOERR. It improves the user experience particularly when the guest rootfs is not backed by the affected block device. (#7107) Nice Error Messages on Exit We now have the chain of e…