virt-firmware

OVMF / armvirt 固件卷的工具 这是一个用于 edk2 固件镜像的小型工具集合。它们支持解码和打印固件卷的内容。变量存储（OVMFVARS.fd）可以被修改，例如用于注册安全启动证书。 virt-fw-dump 解码并打印固件卷的内容。 用法：virt-fw-dump -i 。 更多信息请尝试 virt-fw-dump --help，包含一些用于过滤输出的选项。 virt-fw-vars 打印和编辑变量存储卷。 目前专注于注册证书和启用安全启动。 打印变量：virt-fw-vars -i --print。 注册证书： root@kitploit: virt-fw-vars ...

CVE-2026-80682

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: virtwifi: The SETNETDEVDEV function should be removed to avoid use-after-free issues. Currently, we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi network devices. However, unregistering a virtwifi device in...

CVE-2026-72239

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

CVE-2026-68468

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

CVE-2026-68468

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

EUVD-2026-59138

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

EUVD-2026-59090

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

CVE-2026-68468 mtd: virt-concat: free duplicate generated name

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

PT-2026-72427

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN". Section 8.8 of the SNP spec says: Before invoking SNP INIT EX with...

PT-2026-72180

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtd virt concat create join. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch...

GO-2024-2688 vulnerabilities

Vulnerabilities for packages: virt-operator, harvester-fips, virt-controller-fips, virt-operator-fips, virt-launcher, harvester...

GO-2026-4384 vulnerabilities

Vulnerabilities for packages: virt-handler, harvester-fips, virt-controller-fips, virt-operator-fips, docker-machine-driver-harvester, virt-launcher, harvester...

GO-2024-2816 vulnerabilities

Vulnerabilities for packages: virt-operator, harvester-fips, virt-controller-fips, virt-operator-fips, virt-launcher, harvester...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-handler, virt-controller-fips, virt-operator-fips, docker-machine-driver-harvester, virt-launcher...

GO-2025-4105 vulnerabilities

Vulnerabilities for packages: virt-handler, virt-controller-fips, virt-operator-fips, docker-machine-driver-harvester, virt-launcher...

GO-2025-4110 vulnerabilities

Vulnerabilities for packages: virt-controller, virt-api, virt-handler-fips, virt-operator, virt-handler, virt-api-fips, virt-controller-fips, virt-operator-fips, docker-machine-driver-harvester, virt-launcher...

Security update for kubevirt

This update for kubevirt fixes the following issue: CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

AZL-95943 CVE-2026-13622 affecting package kubevirt 1.8.4-1

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...