virt:rhel/libvirt vulnerabilities
CVEs whose affected-version data names the virt:rhel/libvirt package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-77159Medium· 5.5PoCA symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can…
CVE-2026-18917High· 7.8A flaw was found in libvirt
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. …
CVE-2026-63622High· 7.8A flaw was found in libvirt
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `sw…