Moderate Security Vulnerability in libvirt: Denial of Service via XML Parsing
Summary
ALSA-2026:18326: Moderate: libvirt security update. Affects libvirt versions < 11.10.0-12.el10_2.alma.1. Fixed in 11.10.0-12.el10_2.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libvirt is a toolkit used to manage platform virtualization. It provides a set of APIs for managing virtual machines and their resources, enabling users to interact with various hypervisors like KVM. The libvirt package is essential for running and managing virtualized environments on Linux systems. This package is widely used in cloud computing and virtualization solutions, making its security critical for maintaining system integrity and availability.
Vulnerability Detail
The vulnerability identified as CVE-2025-12748 in libvirt pertains to a Denial of Service (DoS) issue that arises from improper handling of XML parsing. An attacker can exploit this vulnerability by sending crafted XML data to the libvirt service, leading to potential crashes or unresponsive states in the virtual machine management system. This can severely disrupt services relying on virtualization, impacting availability and performance.
How To Fix
Minimum fixed version
11.10.0-12.el10_2.alma.1
This is the first release that contains the fix.
sudo dnf update libvirtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the libvirt service or implement firewall rules to limit incoming connections until the package is updated. This can be done by configuring the firewall to block unauthorized access to the libvirt management ports.
Conclusion
The libvirt package has a moderate security vulnerability (CVE-2025-12748) that can lead to Denial of Service attacks through XML parsing. It is crucial for users to update to the patched version to mitigate risks. Temporary workarounds can be implemented while awaiting updates.
See every vulnerability recorded for libvirt →
FAQ
CVE-2025-12748 is a vulnerability in the libvirt package that allows for Denial of Service attacks through improper XML parsing.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability can lead to service disruptions, crashes, or unresponsive states in virtual machine management, affecting the availability of services relying on virtualization.
Yes, a patch is available in version 11.10.0-12.el10_2.alma.1 and later for the libvirt package.
If immediate updates are not possible, consider implementing firewall rules to restrict access to the libvirt service as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for libvirt.
