Critical Privilege Escalation and Buffer Overflow Vulnerability in libvirt
Summary
RLSA-2026:74424: Important: libvirt security, bug fix, and enhancement update. Affects libvirt versions < 0:11.10.0-12.7.el9_8. Fixed in 0:11.10.0-12.7.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libvirt is a toolkit, API, and management layer for virtualization technologies, providing a consistent interface for managing virtual machines and their resources across different hypervisors. It enables users to create, manage, and interact with virtualized environments, making it essential for cloud computing and server virtualization. However, vulnerabilities in libvirt can lead to severe security risks, including unauthorized access and system crashes.
Vulnerability Detail
The libvirt library has two critical vulnerabilities. The first, identified as CVE-2026-63622, allows for privilege escalation via a symlink following, which could enable an attacker to gain elevated permissions. The second vulnerability, CVE-2026-18917, involves an integer overflow in the NodeGetFreePages RPC handler, leading to a heap buffer overflow. This could allow an attacker to execute arbitrary code or crash the system. The CVSS score for this vulnerability is 7.8, indicating a high severity level.
How To Fix
Minimum fixed version
0:11.10.0-12.7.el9_8
This is the first release that contains the fix.
sudo dnf update libvirtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider restricting access to the libvirt service and monitoring for any unauthorized access attempts until the package can be updated.
Conclusion
The vulnerabilities in libvirt pose significant security risks that can lead to privilege escalation and system instability. It is crucial to update to the patched version to mitigate these risks. Regular monitoring and updates are essential for maintaining the security of your virtualization environment.
See every vulnerability recorded for libvirt →
FAQ
libvirt is a toolkit and API for managing virtualization technologies, providing a consistent interface for creating and managing virtual machines.
The vulnerabilities can lead to privilege escalation and buffer overflow attacks, potentially allowing unauthorized access and system crashes.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
The CVSS score for this vulnerability is 7.8, indicating a high severity level.
You can update the libvirt package by running the command 'sudo dnf update libvirt' in your terminal.
References
Related vulnerabilities
Recent vulnerabilities recorded for libvirt.
