Red Hat Security Advisory: libvirt security, bug fix, and enhancement update

Fixed packages 59

Vulnerabilities 2

• High 7.8
  CVE-2026-18917

  Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow

  A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUM…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Aug 20, 2026
• High 7.8
  CVE-2026-63622

  Libvirt: swtpm privilege escalation via symlink following

  A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Aug 10, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2513065
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520161
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75583.json
• report
  https://access.redhat.com/security/cve/CVE-2026-18917
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-18917
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-18917
• report
  https://access.redhat.com/security/cve/CVE-2026-63622
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-63622
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-63622