{ "document" : { "aggregate_severity" : { "namespace" : "https://access.redhat.com/security/updates/classification/", "text" : "Important" }, "category" : "csaf_security_advisory", "csaf_version" : "2.0", "distribution" : { "text" : "Copyright © Red Hat, Inc. All rights reserved.", "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "en", "notes" : [ { "category" : "summary", "text" : "Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements.", "title" : "Topic" }, { "category" : "general", "text" : "OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.14 images.", "title" : "Details" }, { "category" : "legal_disclaimer", "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title" : "Terms of Use" } ], "publisher" : { "category" : "vendor", "contact_details" : "https://access.redhat.com/security/team/contact/", "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name" : "Red Hat Product Security", "namespace" : "https://www.redhat.com" }, "references" : [ { "category" : "self", "summary" : "https://access.redhat.com/errata/RHSA-2026:53671", "url" : "https://access.redhat.com/errata/RHSA-2026:53671" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-13201", "url" : "https://access.redhat.com/security/cve/CVE-2026-13201" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-13622", "url" : "https://access.redhat.com/security/cve/CVE-2026-13622" }, { "category" : "external", "summary" : "https://access.redhat.com/security/updates/classification/", "url" : "https://access.redhat.com/security/updates/classification/" }, { "category" : "self", "summary" : "Canonical URL", "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53671.json" } ], "title" : "Red Hat Security Advisory: OpenShift Virtualization v4.14 Images", "tracking" : { "current_release_date" : "2026-08-23T14:53:22+00:00", "generator" : { "date" : "2026-08-23T14:53:22+00:00", "engine" : { "name" : "Red Hat SDEngine", "version" : "5.3.16" } }, "id" : "RHSA-2026:53671", "initial_release_date" : "2026-08-11T17:01:01+00:00", "revision_history" : [ { "date" : "2026-08-11T17:01:01+00:00", "number" : "1", "summary" : "Initial version" }, { "date" : "2026-08-22T06:15:42+00:00", "number" : "2", "summary" : "Last updated version" }, { "date" : "2026-08-23T14:53:22+00:00", "number" : "3", "summary" : "Last generated version" } ], "status" : "final", "version" : "3" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Red Hat Container Native Virtualization 4.14", "product" : { "name" : "Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:container_native_virtualization:4.14::el9" } } } ], "category" : "product_family", "name" : "Red Hat Container Native Virtualization" }, { "branches" : [ { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "product_identification_helper" : { "purl" : "pkg:oci/libguestfs-tools-rhel9@sha256%3Ad9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9&tag=1786309926" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "product_identification_helper" : { "purl" : "pkg:oci/pr-helper-rhel9@sha256%3A738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9&tag=1786309619" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-api-rhel9@sha256%3A8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9&tag=1786309619" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-artifacts-server-rhel9@sha256%3A061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9&tag=1786309623" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-controller-rhel9@sha256%3A203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9&tag=1786309611" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-exportproxy-rhel9@sha256%3Afacbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9&tag=1786309624" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-exportserver-rhel9@sha256%3A95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9&tag=1786309619" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-handler-rhel9@sha256%3A073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9&tag=1786309624" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-launcher-rhel9@sha256%3Af467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9&tag=1786309632" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64", "product_identification_helper" : { "purl" : "pkg:oci/virt-operator-rhel9@sha256%3Ab47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9&tag=1786309628" } } } ], "category" : "architecture", "name" : "amd64" }, { "branches" : [ { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "product_identification_helper" : { "purl" : "pkg:oci/libguestfs-tools-rhel9@sha256%3A6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9&tag=1786309926" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "product_identification_helper" : { "purl" : "pkg:oci/pr-helper-rhel9@sha256%3A532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9&tag=1786309619" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-api-rhel9@sha256%3A5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9&tag=1786309619" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-artifacts-server-rhel9@sha256%3Ae298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9&tag=1786309623" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-controller-rhel9@sha256%3Aec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9&tag=1786309611" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-exportproxy-rhel9@sha256%3A5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9&tag=1786309624" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-exportserver-rhel9@sha256%3Ae1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9&tag=1786309619" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-handler-rhel9@sha256%3A0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9&tag=1786309624" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-launcher-rhel9@sha256%3Af3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9&tag=1786309632" } } }, { "category" : "product_version", "name" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "product" : { "name" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "product_id" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "product_identification_helper" : { "purl" : "pkg:oci/virt-operator-rhel9@sha256%3A999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9&tag=1786309628" } } } ], "category" : "architecture", "name" : "arm64" } ], "category" : "vendor", "name" : "Red Hat" } ], "relationships" : [ { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64 as a component of Red Hat Container Native Virtualization 4.14", "product_id" : "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" }, "product_reference" : "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64", "relates_to_product_reference" : "Red Hat Container Native Virtualization 4.14" } ] }, "vulnerabilities" : [ { "acknowledgments" : [ { "names" : [ "Huzaifa Sidhpurwala" ], "organization" : "Red Hat", "summary" : "This issue was discovered by Red Hat." } ], "cve" : "CVE-2026-13201", "cwe" : { "id" : "CWE-61", "name" : "UNIX Symbolic Link (Symlink) Following" }, "discovery_date" : "2026-06-24T13:52:04.691000+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2492203" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler's IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash — resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "A flaw was found in KubeVirt's safepath package where OpenAtNoFollow obtains a file descriptor to a leaf symlink using O_PATH|O_NOFOLLOW, then downstream operations resolve the path via /proc/self/fd/N which dereferences the symlink, defeating the intended no-follow protection.\n\nThe primary impact is through notify socket hijacking: virt-handler uses safepath to resolve the path to the notify socket inside each virt-launcher pod. A namespace-level tenant with pod access can replace this socket path with a symlink to an attacker-controlled socket, enabling injection of arbitrary VM domain lifecycle events. Since virt-handler treats this as a trusted IPC channel, injected events are processed without validation and propagated to the Kubernetes API as VMI status updates. This allows the attacker to trigger incorrect VM lifecycle actions (shutdowns, restarts, migrations), corrupt VMI resource state, or crash the virt-handler process through malformed events. Because virt-handler is a single DaemonSet pod per node, a sustained crash loop denies VM management services — including console access, live migration, and lifecycle operations — for all virtual machines on that node.\n\nA secondary impact exists through the chown/chmod path: virt-handler (running as root on the node) can be tricked into applying file ownership or permission changes to arbitrary host files with hardcoded values. This modification is blind — the attacker cannot read or write file contents and remains confined to the container. In default OpenShift Virtualization deployments, SELinux mandatory access controls and RHCOS immutable filesystem layers limit the set of targetable host files.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64" ], "known_not_affected" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-13201" }, { "category" : "external", "summary" : "RHBZ#2492203", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2492203" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13201", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13201" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13201", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13201" } ], "release_date" : "2026-06-24T00:00:00+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T17:01:01+00:00", "details" : "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53671" }, { "category" : "workaround", "details" : "The following measures reduce the attacker pool and limit secondary impact:\n\nReview RBAC policies to restrict pods/exec permissions on virt-launcher pods to only those users who strictly require it. This reduces the number of identities that can place symlinks in the launcher filesystem.\nEnsure SELinux is in enforcing mode (default in OpenShift). While SELinux does not prevent the notify socket hijacking path, it restricts the set of host files targetable through the chown/chmod path by blocking operations on files with protected security labels.\nRHCOS immutable filesystem layers prevent modification of core OS files through the chown/chmod path.\nNote: no mitigation currently addresses the notify socket hijacking vector. The attacker's ability to inject domain events into virt-handler is not constrained by SELinux or filesystem immutability.", "product_ids" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "LOCAL", "availabilityImpact" : "HIGH", "baseScore" : 7.3, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "privilegesRequired" : "LOW", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H", "version" : "3.1" }, "products" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption" }, { "acknowledgments" : [ { "names" : [ "Huzaifa Sidhpurwala" ], "organization" : "Red Hat", "summary" : "This issue was discovered by Red Hat." } ], "cve" : "CVE-2026-13622", "cwe" : { "id" : "CWE-22", "name" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "discovery_date" : "2026-06-29T10:07:50.206000+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2494142" } ], "notes" : [ { "category" : "description", "text" : "A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink to the host CRI-O socket. Because virt-handler runs as root in the host mount namespace, absolute symlink targets resolve against the host filesystem, and the bidirectional io.Copy proxy relays attacker-controlled bytes to the container runtime, enabling full node compromise.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Red Hat has rated this vulnerability as Important impact. The vulnerable code is in the virt-handler component, a privileged DaemonSet running as root in the host mount namespace on every compute node. Its migration proxy dials Unix sockets inside target virt-launcher pods via /proc//root/ using net.Dial(), which follows symbolic links. Because virt-handler operates in the host mount namespace, absolute symlink targets resolve against the host root filesystem, enabling container-to-host escape.\n\nExploitation requires an authenticated user with namespace-level edit permissions (kubevirt.io:edit) and pods/exec access — standard permissions for VM operators. The impact of successful exploitation is complete node compromise via CRI-O socket access, bypassing all Kubernetes admission controls.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64" ], "known_not_affected" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-13622" }, { "category" : "external", "summary" : "RHBZ#2494142", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2494142" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13622", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13622" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13622", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13622" } ], "release_date" : "2026-08-12T00:00:00+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T17:01:01+00:00", "details" : "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53671" }, { "category" : "workaround", "details" : "Restrict pods/exec permissions in namespaces that run virtual machines. The pods/exec RBAC permission is required for the attack — removing it from VM operator roles prevents exploitation. \n\nAdditionally, enable Kubernetes audit logging and monitor for kubectl exec commands targeting virt-launcher pods, especially during live migration events.", "product_ids" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "LOCAL", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "LOW", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:6836d779bd5c36b8c7506b8136f1e7ca0812a78207c29052afd4ef005c582200_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e09527b09332542577416a1b578328fcbbaf8f5777d40c4bf85e5adccba90c_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:532c71399bac0563b94d983f20a5ee527c87e7dc01b90903bca46255485abb42_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:738e702c4dd1a2e3960060cae568be6fdd2073331fecd1c38a040424ad608886_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:5d4a32927783c286d4746de047767ed731e2c70dc8d8da214801261dd3000528_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:8608050f0c5cab2c48a920765bdca8f419d9ad043cade272edf260023a33772f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:061f68702008d8fde1ee9cf70070570f9415ef47af5835a9c838395cb8f263d0_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e298246b3ffec65a87676852b17a7d9572a997b0ba237c516b918af50f15347d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:203221331220c21d8c39e47959a728dc0c7ea43a651c4b6a0f687cdc48f2d6b9_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec06cd12090dae44c577a4443e4d8d662a5ef9fc8916bd9bf39484b273aafe51_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e56c0f45881b2bce0842084c4a1008437a1cd0b2405799fb7cc3e982d4ae88d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:facbe5aea22f92e28d84197402ee2276ac0add3e31353b282fab65c922192b91_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:95ec3acecca2dedde2359d529741c1ecc293c96d90407bb6733c8c7636a0d27f_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:e1b5ef2a5f4840882436f9922bc77e2deb12f69b8484780049566dec18d959a9_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:073c88039cf40fbff37524db5789bf1fdbd53271c329ed1e882be9cb787aea35_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0ff6ac2bf1e3f61bc1006b8ace529e82d15e4778f77601d403b422a6c9dc235d_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f3db0e4503ad1d6c74d02c6356cc47ac72e8801e249adca0a53b24ed03751745_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f467289bee78f2e8406a6c670aa1c1f38f74e1524abc3ceb6db18114f0fa7112_amd64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:999e7349a9884f828135531410bea1c5630626954f8d9e22f14e8973c620b7c8_arm64", "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:b47bf4544b25e53e5c866da3e2d709b6e4862e4809024c001bc7001e18721a15_amd64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host" } ] }