CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, virt-operator-fips, virt-launcher, virt-handler, virt-controller-fips...

AZL-69790 CVE-2025-64436 affecting package kubevirt for versions less than 1.6.3-1

KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-controlled node. This vulnerability could...