CVE-2026-7374 vulnerabilities

Vulnerabilities for packages: harvester, docker-machine-driver-harvester, harvester-fips...

CVE-2026-7374 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:2077-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2077-1 advisory. This update for kubevirt fixes the following issue: CVE-2026-7374: Fixed privilege escalation and node compromise via symlink following...

AZL-89193 CVE-2026-7374 affecting package kubevirt for versions less than 1.7.1-7

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to...