163 matches found
GO-2026-4384 vulnerabilities
Vulnerabilities for packages: virt-launcher, virt-handler, virt-operator-fips, docker-machine-driver-harvester, harvester-fips, harvester, virt-controller-fips...
GO-2025-4110 vulnerabilities
Vulnerabilities for packages: virt-operator, virt-api, virt-launcher, virt-handler, virt-operator-fips, virt-handler-fips, docker-machine-driver-harvester, virt-api-fips, virt-controller, virt-controller-fips...
GO-2025-4104 vulnerabilities
Vulnerabilities for packages: virt-launcher, virt-handler, virt-operator-fips, docker-machine-driver-harvester, virt-controller-fips...
GO-2025-4105 vulnerabilities
Vulnerabilities for packages: virt-launcher, virt-handler, virt-operator-fips, docker-machine-driver-harvester, virt-controller-fips...
SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3604-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3604-1 advisory. This update for kubevirt fixes the following issue: - CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container esca...
Security update for kubevirt
This update for kubevirt fixes the following issue: CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:3604-1 Security update for kubevirt
This update for kubevirt fixes the following issue: - CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840...
CVE-2026-13622
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
AZL-95943 CVE-2026-13622 affecting package kubevirt 1.8.4-2
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
EUVD-2026-57615
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
CVE-2026-13622 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
CVE-2026-13622
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
CVE-2026-13622
The CVE concerns KubeVirt, specifically virt-handler’s migration proxy. During live migration, the proxy dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths without symlink protection. Socket paths live in qemu-owned directories writable by the virt-launcher user. An att...
CVE-2026-13622 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
CVE-2026-13622
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
CVE-2026-13622: Improper Limitation of a Pathname to a Restricted Directory
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/ /root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...
SUSE CVE-2026-13218
A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...
SUSE CVE-2026-13208
A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomainEvent and HandleK8SEvent derive the VMI identity namespace/name solely from the request body without validating it against the connection's origin. Each virt-launcher pod connects through a per-VMI...
EUVD-2026-39594
A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...
CVE-2026-13218
A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...