Red Hat Container Native Virtualization 4.13

2 results · Clear filters · Feed

• High 8.8
  CVE-2026-13622

  Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

  A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These s…

  Red Hat Red Hat Container Native Virtualization 4.18 Red Hat Container Native Virtualization 4.20 Red Hat Container Native Virtualization 4.17 Azure Linux
  Aug 12, 2026
• High 7.3
  CVE-2026-13201

  Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

  A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. …

  Red Hat Red Hat Container Native Virtualization 4.17 Red Hat Container Native Virtualization 4.19 Red Hat Container Native Virtualization 4.21 Azure Linux
  Jun 24, 2026