[SECURITY] Fedora 44 Update: cockpit-machines-357-1.fc44

Cockpit component for managing libvirt virtual machines...

[SECURITY] Fedora 45 Update: vhostmd-1.2-3.fc45

vhostmd provides a "metrics communication channel" between a host and its hosted virtual machines, allowing limited introspection of host resource usage from within virtual machines...

You Shall Not Pass into Ring-0! a User Privacy-Friendly Anti-Cheat Architecture for Personal Computers

Kernel-level anti-cheats are effective against malicious player behavior in competitive video games, but raise significant user privacy concerns regarding installing unverifiable components at privileged modes i.e., ring-0 in x86. While existing research has focused on improving the effectiveness...

Astra Linux – Vulnerability in OVN

A flaw was discovered in the Open Virtual Network OVN. Specially crafted UDP packets may bypass egress access control lists ACLs in OVN installations that are configured with a logical switch equipped with DNS records. This occurs if the same switch has any egress ACLs configured. This issue can...

Astra Linux – Vulnerability in Linux, Linux 5.10

A issue was discovered in the x86 KVM subsystem of the Linux kernel before version 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVMVCPUPREEMPTED situations...

Docker Containers Vs. Virtual Machines: A Comparative Study of Architecture, Performance, Configuration, and Security

Modern application platforms must isolate workloads while preserving deployment speed, portability, resource efficiency, and security. Virtual machines VMs and Docker containers address this requirement at different abstraction layers: VMs virtualize hardware and run independent guest operating...

Linux Distros Unpatched Vulnerability : CVE-2026-84165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an...

smolvm v1.8.3

smolvm Branchable microVMs for AI agents. Embed lightweight virtual machines into your software, portable dev environments, and local sandboxing. Install brew install smol-machines/tap/smolvm macOS Homebrew curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows: unzip the...

EUVD-2026-63629

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

CVE-2026-69543

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability

...

CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability

...

CVE-2026-69543

An SSRF vulnerability in Azure Virtual Machines allows an authorized low-privilege attacker to elevate privileges over a network, with a HIGH CVSS 3.1 base score of 8.5. No patch version, workaround, or exploitation evidence is provided in the documents.

Azure Virtual Machines Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

PT-2026-79211

Name of the Vulnerable Software and Affected Versions Azure Virtual Machines affected versions not specified Description Server-side request forgery SSRF, a flaw where an attacker induces a server-side application to make requests to an unintended location, allows an authorized attacker to elevat...

CVE-2026-69543: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

EUVD-2026-42933

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket...

fence-agents security update

4.10.0-110.5 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 4.10.0-110.4 - fenceopenstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320...

[SECURITY] Fedora 44 Update: xen-4.21.2-1.fc44

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

CVE-2026-64307

A flaw was found in the Linux kernel's crypto:ccp module. A local attacker with access to a userspace process could exploit this vulnerability. If Secure Encrypted Virtualization SEV initialization fails while Kernel-based Virtual Machine KVM is running virtual machines, the attacker can trigger ...