999 matches found
CVE-2026-31695
CVE-2026-31695 is a Linux kernel issue affecting the virt_wifi driver. The root cause is a race during unregistration where a device’s parent pointer could reference freed memory, causing a use-after-free during ethtool operations. The vulnerability arises from using SET_NETDEV_DEV(dev, &priv->...
CVE-2026-31695 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...
CVE-2026-31695
In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-;lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together wit...
CVE-2026-31695 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: remove SETNETDEVDEV to avoid use-after-free Currently we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi net devices. However, unregistering a virtwifi device in netdevruntodo can happen together with...
Oracle Linux 8 : virt:kvm_utils3 (ELSA-2026-50239)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50239 advisory. - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501...
CVE-2026-31470 virt: tdx-guest: Fix handling of host controlled 'quote' buffer length
In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled value quotebuf-outlen that determines how many bytes of the quote are copied out to guest userspace. In TDX environments with remote...
CVE-2026-31470: Out-of-bounds Write
In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled value quotebuf-outlen that determines how many bytes of the quote are copied out to guest userspace. In TDX environments with remote...
CVE-2026-6383 vulnerabilities
Vulnerabilities for packages: virt-handler, virt-api, virt-api-fips, virt-controller, virt-launcher, virt-operator, docker-machine-driver-harvester, virt-handler-fips, virt-controller-fips, virt-operator-fips...
GHSA-J6CV-3W8P-VRG8 vulnerabilities
Vulnerabilities for packages: virt-handler, virt-api, virt-api-fips, virt-controller, virt-launcher, virt-operator, docker-machine-driver-harvester, virt-handler-fips, virt-controller-fips, virt-operator-fips...
Linux amdgpu_virt_rlcg_reg_rw DoS
The vulnerability of the amdgpuvirtrlcgregrw function in the drivers/gpu/drm/amd/amdgpu/amdgpuvirt.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: goreleaser, kubernetes-csi-external-health-monitor, pvc-autoresizer-fips, docker-credential-acr-env, extism, kubevirt-cdi-controller, cloud-provider-azure, litmus-chaos-operator-fips, plugin-barman-cloud-fips, thanos-operator, victoriametrics-cluster-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: plugin-barman-cloud-fips, litmus-chaos-operator-fips, victoriametrics-cluster-fips, crossplane-provider-aws-cloudformation-fips, nats-server, prometheus-statsd-exporter-fips, vexctl, controller-gen, oauth2-proxy-fips, local-path-provisioner, nerdctl-fips,...
Improper Privilege Management
kubevirt.io/kubevirt is vulnerable to improper privilege management. The vulnerability is due to excessive permissions granted to the virt-handler service account, which allows an attacker to abuse update and patch capabilities to force VMI migration or schedule privileged pods onto a compromised...
Improper Certificate Validation
kubevirt.io/kubevirt is vulnerable to improper certificate validation. The vulnerability is due to flawed peer verification logic in virt-handler, which allows an attacker to exploit shared credentials from a compromised instance to impersonate virt-api and execute privileged operations on other...
Improper Link Resolution
kubevirt.io/kubevirt is vulnerable to improper link resolution. The vulnerability is due to lack of verification of whether the launcher-sock is a symlink or regular file, which allows an attacker with control over the virt-launcher pod file system to manipulate file ownership on the host and...
Logic Flaw
KubeVirt is vulnerable to a logic flaw. The vulnerability is due to improper validation in the virt-controller, which allows an attacker to create a malicious pod with matching labels to mislead the controller and disrupt VMI management, leading to denial-of-service...
Improper Symlink Handling
kubevirt.io/kubevirt is vulnerable to improper symlink handling. The vulnerability is due to improper validation of symbolic links in PVC disk mounting along with incorrect file ownership changes, which allows an attacker with control over PVC contents to create malicious symlinks and read...
virt:ol and virt-devel:ol security update
hivex 1.3.18-23 - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 libguestfs 1.44.0-9.0.2 - libguestfs.spec: Add btrfs-progs RPM to appliance Orabug: 35634755 libguestfs-winsupport 8.10-1 - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz2236373 libiscsi...
PT-2026-36325
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the virt wifi component of the Linux kernel. The problem occurs because SET NETDEV DEVdev, &priv-lowerdev-dev is executed for virt wifi net devices, but...
virt:rhel and virt-devel:rhel security update
An update is available for seabios, swtpm, libguestfs-winsupport, module.libvirt, perl-Sys-Virt, module.supermin, module.libiscsi, module.libvirt-dbus, libvirt-dbus, module.swtpm, module.virt-v2v, qemu-kvm, module.sgabios, module.perl-Sys-Virt, libvirt-python, module.qemu-kvm,...