Critical Privilege Escalation and Buffer Overflow Vulnerability in libvirt Package
Summary
ALSA-2026:75583: Important: libvirt security, bug fix, and enhancement update. Affects libvirt versions < 11.10.0-12.9.el10_2.alma.1. Fixed in 11.10.0-12.9.el10_2.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The libvirt library is a crucial component for managing and interacting with virtualization technologies on Linux and other operating systems. It provides a C API and tools for remote management of virtualized systems, making it essential for cloud computing and virtualization environments. However, recent vulnerabilities have been identified that could compromise the security of systems utilizing this library.
Vulnerability Detail
The libvirt package has been found to contain two significant vulnerabilities. The first is a privilege escalation issue related to swtpm via symlink following (CVE-2026-63622), which could allow an attacker to gain elevated privileges on the system. The second vulnerability is an integer overflow in the NodeGetFreePages RPC handler, leading to a heap buffer overflow (CVE-2026-18917). This could allow an attacker to execute arbitrary code, potentially compromising the entire system. Both vulnerabilities pose serious risks to the integrity and security of virtualized environments.
How To Fix
Minimum fixed version
11.10.0-12.9.el10_2.alma.1
This is the first release that contains the fix.
sudo dnf update libvirtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the libvirt service and ensure that only trusted users have the necessary permissions to interact with virtual machines. Additionally, disabling unnecessary features of libvirt may help mitigate the risks until the package is updated.
Conclusion
The vulnerabilities in the libvirt package present significant risks to virtualization environments. It is crucial for users to update to the latest patched versions to safeguard their systems. Implementing temporary workarounds can help mitigate risks until updates are applied.
See every vulnerability recorded for libvirt →
FAQ
Libvirt is a toolkit used for managing virtualization technologies, providing a consistent API for interacting with different hypervisors.
The vulnerabilities could allow attackers to escalate privileges or execute arbitrary code, leading to potential system compromise.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing access restrictions and disabling unnecessary features as a temporary measure.
Detailed information can be found on the CVE pages for CVE-2026-18917 and CVE-2026-63622.
Related vulnerabilities
Recent vulnerabilities recorded for libvirt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
