Red Hat OpenShift Virtualization: Schwachstelle ermöglicht Privilegieneskalation

Summary

Product

Vulnerabilities 1

• Critical 9.9
  CVE-2026-7374

  Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

  A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacin…

  Red Hat Red Hat Container Native Virtualization 4.18 Red Hat Container Native Virtualization 4.20 Red Hat Container Native Virtualization 4.17 Azure Linux Wolfi Go
  May 26, 2026

Revision history

1. 2026-06-16 #3

   doppelte Eintragung bereinigt

2. 2026-06-15 #2

   Neue Updates von SUSE aufgenommen

3. 2026-05-26 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:20720 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20720
• Red Hat Security Advisory RHSA-2026:20736 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20736
• Red Hat Security Advisory RHSA-2026:20763 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20763
• Red Hat Security Advisory RHSA-2026:20767 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20767
• Red Hat Security Advisory RHSA-2026:20782 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20782
• Red Hat Security Advisory RHSA-2026:20975 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20975
• Red Hat Bugzilla – Bug 2463728 vom 2026-05-26
  https://bugzilla.redhat.com/show_bug.cgi?id=2463728
• Red Hat Customer Portal CVE-2026-7374 vom 2026-05-26
  https://access.redhat.com/security/cve/cve-2026-7374
• Red Hat Security Advisory RHSA-2026:20825 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:20825
• Red Hat Security Advisory RHSA-2026:20866 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:20866
• Red Hat Security Advisory RHSA-2026:20886 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:20886
• Red Hat Security Advisory RHSA-2026:20890 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:20890
• SUSE Security Update SUSE-SU-2026:2401-1 vom 2026-06-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026757.html
• SUSE Security Update SUSE-SU-2026:2400-1 vom 2026-06-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026758.html