Summary
The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.
Security Fix(es):
* libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)
* libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (CVE-2026-18917)
Bug Fix(es) and Enhancement(s):
* Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to virtio-vga on target [almalinux-9.8.z] (JIRA:AlmaLinux-186018)
* libvirt-guests does not work together with virtlockd on shutdown [almalinux-9.8.z] (JIRA:AlmaLinux-224986)
* Expose guest-get-devices in libvirt-api [almalinux-9.8.z] (JIRA:AlmaLinux-243306)
* allow hyperv pvpanic "device" to process Windows crash dump [almalinux-9.8.z] (JIRA:AlmaLinux-242549)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libvirt | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-client | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-client-qemu | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-common | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-network | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-nwfilter | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-interface | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-network | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nodedev | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nwfilter | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-qemu | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-secret | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-core | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-disk | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-iscsi | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-logical | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-mpath | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-rbd | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-scsi | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-kvm | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-lock | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-log | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-lockd | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-sanlock | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-proxy | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-devel | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-docs | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-libs | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-nss | 11.10.0-12.7.el9_8.alma.1 |
| AlmaLinux · 9 | libvirt-ssh-proxy | 11.10.0-12.7.el9_8.alma.1 |
Vulnerabilities 2
-
High 7.8
Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUM…
-
High 7.8
Libvirt: swtpm privilege escalation via symlink following
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, …