CVE-2026-63622

CVE-2026-63622 : Affected software is libvirt. The flaw is a symlink-following vulnerability in the virFileChownFiles() function that allows a local attacker running as the confined swtpm user to plant a symbolic link in the swtpm state directory, tricking the root‑level libvirt daemon into chang...

EUVD-2026-55823

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

CVE-2026-63622

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...