CVE-2026-6383 affecting package kubevirt for versions less than 1.8.4-1

CVE-2026-6383 affecting package kubevirt for versions less than 1.8.4-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2026-6383

A flaw was found in KubeVirt's Role-Based Access Control RBAC evaluation logic. The authorization mechanism improperly truncates subresource names, leading to incorrect permission evaluations. This allows authenticated users with specific custom roles to gain unauthorized access to subresources,...