kubevirt1.9-container-disk-1.9.0-1.1 on GA media (moderate)

kubevirt1.9-container-disk-1.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11520-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58190 CVE-2026-13201 CVE-2026-27136 CVE-2026-39821 CVE-2026-39827 CVE-2026-39828 CVE-2026-39832 CVE-2026-42508 CVE-2026-56852 CVSS scores:...

SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3480-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3480-1 advisory. - Security update correcting a CVE over-claim from the previous update, verified by auditing the fix code actually present in the...

SUSE CVE-2026-13201

A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses OPATH|ONOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel...

CVE-2026-13201 Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses OPATH|ONOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel...