PT-2026-106640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the virt wifi component. The virt wifi newlink function calls netif stacked transfer operstate before register netdevice. If the lower device is dormant,...

PT-2026-106680

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the virt wifi module where the virt wifi start xmit function returns NET XMIT DROP without freeing the socket buffer skb when the simulated link is disconnected. Because...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses. On 32-bit machines with CONFIGARMLPAE, it is possible for lowmem allocations to be backed by addresses located physically beyond the 32-bit address limit. This issue was...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: virtwifi: The SETNETDEVDEV function should be removed to avoid use-after-free issues. Currently, we execute SETNETDEVDEVdev, &priv-lowerdev-dev for the virtwifi network devices. However, unregistering a virtwifi device in...

[SECURITY] Fedora 45 Update: virt-viewer-11.0-20.fc45

Virtual Machine Viewer provides a graphical console client for connecting to virtual machines. It uses the GTK-VNC or SPICE-GTK widgets to provide the display, and libvirt for looking up VNC/SPICE server details...

[SECURITY] Fedora 45 Update: virt-top-1.1.3-3.fc45

virt-top is a 'top1'-like utility for showing stats of virtualized domains. Many keys and command line options are the same as for ordinary 'top'. It uses libvirt so it is capable of showing stats across a variety of different virtualization systems...

[SECURITY] Fedora 45 Update: virt-v2v-2.13.6-2.fc45

Virt-v2v converts a single guest from a foreign hypervisor to run on KVM. It can read Linux and Windows guests running on VMware, Xen, Hyper-V and some other hypervisors, and convert them to KVM managed by libvirt, OpenStack, oVirt, Red Hat Virtualisation RHV or several other targets. It can modi...

Rocky Linux 8.6 [CIQ] Security Update: virt-v2v / virt-v2v-bash-completion / virt-v2v-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0844)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260844 advisory. This advisory aggregates security fixes for the virt-v2v SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8.6 [CIQ] Security Update: virt-v2v / virt-v2v-bash-completion / virt-v2v-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0275)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260275 advisory. This advisory aggregates security fixes for the virt-v2v SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409. Tenable h...

Rocky Linux 8.6 [CIQ] Security Update: perl-Sys-Virt / perl-Sys-Virt-debuginfo / perl-Sys-Virt-debugsource Multiple Vulnerabilities (ciqsa-2026_0838)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260838 advisory. This advisory aggregates security fixes for the perl-Sys-Virt SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8.6 [CIQ] Security Update: perl-Sys-Virt / perl-Sys-Virt-debuginfo / perl-Sys-Virt-debugsource Multiple Vulnerabilities (ciqsa-2026_0134)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260134 advisory. This advisory aggregates security fixes for the perl-Sys-Virt SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409...

SUSE CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

SUSE CVE-2026-97478

In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrnirqfddeassign and the eventfd EPOLLHUP wakeup can race and free the same struct hsmirqfd: CPU0 CPU1 ---- ---- eventfdrelease wakeuppollEPOLLHUP hsmirqfdwakeup...

CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

AZL-105537 CVE-2026-102623 affecting package kubevirt 1.8.4-2

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

EUVD-2026-89100

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw in KubeVirt allows an authenticated user with permissions to create Virtual Machine Instances (VMIs) to trigger a Denial of Service (DoS) . The vulnerability exists because the virt-controller component fails to properly validate volume configurations, specifically when a virtual machine d...

CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...