CVE-2026-13201 Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.13",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1786346596",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.13::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.14",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1786309624",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.14::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.15",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1786347656",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.15::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.16",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1786030071",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.17",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1786348529",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.18",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1786130068",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.18::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.19",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1786334215",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.19::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.20",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1785831334",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.20::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.21",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1785829701",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.21::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Container Native Virtualization 4.22",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "container-native-virtualization/virt-handler-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1785140336",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4.22::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-handler",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  }
]