Summary
Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.
Security Fix(es):
* libvirt: Denial of service in XML parsing (CVE-2025-12748)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libvirt | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-client | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-client-qemu | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-common | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-network | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-nwfilter | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-interface | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-network | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nodedev | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nwfilter | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-qemu | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-secret | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-core | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-disk | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-iscsi | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-logical | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-mpath | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-rbd | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-scsi | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-kvm | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-lock | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-log | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-lockd | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-sanlock | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-proxy | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-devel | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-docs | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-libs | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-nss | 11.10.0-12.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-ssh-proxy | 11.10.0-12.el9_8.alma.1 |
Vulnerabilities 1
-
Medium 5.5CVE-2025-12748 Public exploit
Libvirt: denial of service in xml parsing
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML…