AZL-105537 CVE-2026-102623 affecting package kubevirt 1.8.4-2

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

EUVD-2026-89100

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw in KubeVirt allows an authenticated user with permissions to create Virtual Machine Instances (VMIs) to trigger a Denial of Service (DoS) . The vulnerability exists because the virt-controller component fails to properly validate volume configurations, specifically when a virtual machine d...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

GO-2024-2688 vulnerabilities

Vulnerabilities for packages: virt-operator, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

GO-2024-2816 vulnerabilities

Vulnerabilities for packages: virt-operator, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, virt-handler, virt-controller-fips, virt-operator-fips, virt-launcher...

GO-2025-4105 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, virt-handler, virt-controller-fips, virt-operator-fips, virt-launcher...

CVE-2024-33394 vulnerabilities

Vulnerabilities for packages: virt-operator, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

GHSA-4Q63-MR2M-57HF vulnerabilities

Vulnerabilities for packages: virt-operator, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: virt-operator, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

CVE-2025-14525 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, virt-handler, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

CVE-2024-31420 vulnerabilities

Vulnerabilities for packages: virt-operator, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, virt-handler, virt-controller-fips, harvester-fips, harvester, virt-operator-fips, virt-launcher...

CVE-2026-6383 vulnerabilities

Vulnerabilities for packages: virt-handler, virt-api-fips, virt-operator, virt-controller-fips, virt-controller, virt-operator-fips, virt-launcher, virt-handler-fips, virt-api...

GHSA-J6CV-3W8P-VRG8 vulnerabilities

Vulnerabilities for packages: virt-handler, virt-api-fips, virt-operator, virt-controller-fips, virt-controller, virt-operator-fips, virt-launcher, virt-handler-fips, virt-api...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, kube-oidc-proxy, cadvisor-fips, crossplane-provider-aws-acm, datadog-operator-fips, bank-vaults, nfpm, tekton-pipelines, node-problem-detector-fips, container-object-storage-interface-fips, crossplane-provider-aws-firehose-fips,...