CVE-2026-68468

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

EUVD-2026-59138

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

EUVD-2026-59090

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

CVE-2026-68468 mtd: virt-concat: free duplicate generated name

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

CVE-2026-68468: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

PT-2026-72180

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtd virt concat create join. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch...

PT-2026-72427

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSR AMD64 SYSCFG SNP EN". Section 8.8 of the SNP spec says: Before invoking SNP INIT EX with...

CVE-2026-72239: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

GO-2026-4384 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester, virt-controller-fips, docker-machine-driver-harvester, virt-operator-fips, virt-handler, virt-launcher...

GO-2024-2688 vulnerabilities

Vulnerabilities for packages: harvester, virt-operator, virt-controller-fips, virt-operator-fips, harvester-fips, virt-launcher...

GO-2024-2816 vulnerabilities

Vulnerabilities for packages: harvester, virt-operator, virt-controller-fips, virt-operator-fips, harvester-fips, virt-launcher...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, docker-machine-driver-harvester, virt-operator-fips, virt-handler, virt-launcher...

GO-2025-4110 vulnerabilities

Vulnerabilities for packages: virt-handler-fips, virt-controller, virt-controller-fips, virt-operator, docker-machine-driver-harvester, virt-api, virt-operator-fips, virt-api-fips, virt-handler, virt-launcher...

GO-2025-4105 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, docker-machine-driver-harvester, virt-operator-fips, virt-handler, virt-launcher...

SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3604-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3604-1 advisory. This update for kubevirt fixes the following issue: - CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container esca...

Security update for kubevirt

This update for kubevirt fixes the following issue: CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:3604-1 Security update for kubevirt

This update for kubevirt fixes the following issue: - CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840...

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

AZL-95943 CVE-2026-13622 affecting package kubevirt 1.8.4-2

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

CVE-2026-13622 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...