virt-firmware

Tools for ovmf / armvirt firmware volumes This is a small collection of tools for edk2 firmware images. They support decoding and printing the content of firmware volumes. Variable stores OVMFVARS.fd can be modified, for example to enroll secure boot certificates. virt-fw-dump Decodes and prints...

Rocky Linux 8.6 [CIQ] Security Update: virt-v2v / virt-v2v-bash-completion / virt-v2v-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0844)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260844 advisory. This advisory aggregates security fixes for the virt-v2v SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8.6 [CIQ] Security Update: perl-Sys-Virt / perl-Sys-Virt-debuginfo / perl-Sys-Virt-debugsource Multiple Vulnerabilities (ciqsa-2026_0838)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260838 advisory. This advisory aggregates security fixes for the perl-Sys-Virt SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8.6 [CIQ] Security Update: virt-v2v / virt-v2v-bash-completion / virt-v2v-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0275)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260275 advisory. This advisory aggregates security fixes for the virt-v2v SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409. Tenable h...

Rocky Linux 8.6 [CIQ] Security Update: perl-Sys-Virt / perl-Sys-Virt-debuginfo / perl-Sys-Virt-debugsource Multiple Vulnerabilities (ciqsa-2026_0134)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260134 advisory. This advisory aggregates security fixes for the perl-Sys-Virt SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409...

SUSE CVE-2026-97478

In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrnirqfddeassign and the eventfd EPOLLHUP wakeup can race and free the same struct hsmirqfd: CPU0 CPU1 ---- ---- eventfdrelease wakeuppollEPOLLHUP hsmirqfdwakeup...

CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

EUVD-2026-89100

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw in KubeVirt allows an authenticated user with permissions to create Virtual Machine Instances (VMIs) to trigger a Denial of Service (DoS) . The vulnerability exists because the virt-controller component fails to properly validate volume configurations, specifically when a virtual machine d...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

DEBIAN-CVE-2026-97478

In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrnirqfddeassign and the eventfd EPOLLHUP wakeup can race and free the same struct hsmirqfd: CPU0 CPU1 ---- ---- eventfdrelease wakeuppollEPOLLHUP hsmirqfdwakeup...

UBUNTU-CVE-2026-97478

In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrnirqfddeassign and the eventfd EPOLLHUP wakeup can race and free the same struct hsmirqfd: CPU0 CPU1 ---- ---- eventfdrelease wakeuppollEPOLLHUP hsmirqfdwakeup...

CVE-2026-97478 virt: acrn: Fix irqfd use-after-free during eventfd shutdown

In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrnirqfddeassign and the eventfd EPOLLHUP wakeup can race and free the same struct hsmirqfd: CPU0 CPU1 ---- ---- eventfdrelease wakeuppollEPOLLHUP hsmirqfdwakeup...

CVE-2026-97478

The Linux kernel contains a use-after-free vulnerability within the acrn virtualization component. A race condition exists between acrn_irqfd_deassign() and the eventfd EPOLLHUP wakeup, which can cause both paths to free the same struct hsm_irqfd. This race may cause a work item to resurrect a da...

Linux Distros Unpatched Vulnerability : CVE-2026-97478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrnirqfddeassign and the eventfd EPOLLHUP wakeup can race and free the same struct hsmirqfd: CPU0...

ROS-20260923-73-0012

The vulnerability of the kvmresetdirtygfn function in the virt/kvm/dirtyring.c module of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise...

ROS-20260918-73-0064

The vulnerability in the virt/kvm/eventfd.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses. On 32-bit machines with CONFIGARMLPAE, it is possible for lowmem allocations to be backed by addresses located physically beyond the 32-bit address limit. This issue was...