virt-firmware

ovmf / armvirt 펌웨어 볼륨을 위한 도구 이는 edk2 펌웨어 이미지를 위한 작은 도구 모음입니다. 펌웨어 볼륨의 내용을 디코딩하고 출력하는 기능을 지원합니다. 변수 저장소OVMFVARS.fd는 예를 들어 시큐어 부트 인증서를 등록하기 위해 수정할 수 있습니다. virt-fw-dump 펌웨어 볼륨의 내용을 디코딩하고 출력합니다. 사용법: virt-fw-dump -i . 자세한 내용은 virt-fw-dump --help를 실행해보세요. 출력을 필터링하는 몇 가지 옵션이 있습니다. virt-fw-vars 변수 저장소 볼...

CVE-2026-80682

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: virtwifi: The SETNETDEVDEV function should be removed to avoid use-after-free issues. Currently, we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi network devices. However, unregistering a virtwifi device in...

CVE-2026-72239

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

CVE-2026-68468

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

CVE-2026-68468

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

EUVD-2026-59138

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

EUVD-2026-59090

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

CVE-2026-68468 mtd: virt-concat: free duplicate generated name

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

PT-2026-72427

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN". Section 8.8 of the SNP spec says: Before invoking SNP INIT EX with...

PT-2026-72180

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtd virt concat create join. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch...

GO-2024-2688 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips, virt-operator-fips, virt-operator, virt-launcher, virt-controller-fips...

GO-2024-2816 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips, virt-operator-fips, virt-operator, virt-launcher, virt-controller-fips...

GO-2026-4384 vulnerabilities

Vulnerabilities for packages: virt-handler, harvester, harvester-fips, virt-operator-fips, docker-machine-driver-harvester, virt-launcher, virt-controller-fips...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-handler, virt-operator-fips, docker-machine-driver-harvester, virt-launcher, virt-controller-fips...

GO-2025-4105 vulnerabilities

Vulnerabilities for packages: virt-handler, virt-operator-fips, docker-machine-driver-harvester, virt-launcher, virt-controller-fips...

GO-2025-4110 vulnerabilities

Vulnerabilities for packages: virt-handler, virt-controller, virt-operator-fips, virt-api, docker-machine-driver-harvester, virt-handler-fips, virt-operator, virt-launcher, virt-controller-fips, virt-api-fips...

Security update for kubevirt

This update for kubevirt fixes the following issue: CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

AZL-95943 CVE-2026-13622 affecting package kubevirt 1.8.4-1

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...