Red Hat Container Native Virtualization 4.22

3 results · Clear filters · Feed

• High 8.8
  CVE-2026-13622

  Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

  A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These s…

  Red Hat Red Hat Container Native Virtualization 4.18 Red Hat Container Native Virtualization 4.20 Red Hat Container Native Virtualization 4.17 Azure Linux
  Aug 12, 2026
• High 7.7
  CVE-2026-17527

  Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone

  In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts t…

  Red Hat Red Hat OpenShift Virtualization 4 Red Hat Container Native Virtualization 4.18 Red Hat Container Native Virtualization 4.20 Azure Linux
  Jul 27, 2026
• High 7.3
  CVE-2026-13201

  Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

  A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. …

  Red Hat Red Hat Container Native Virtualization 4.17 Red Hat Container Native Virtualization 4.19 Red Hat Container Native Virtualization 4.21 Azure Linux
  Jun 24, 2026