Red Hat Security Advisory

RHSA-2026:69114

libvirt security update

Released 2026-09-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) libvirt-4.5.0-36.el7_9.7, libvirt-bash-completion-4.5.0-36.el7_9.7, libvirt-client-4.5.0-36.el7_9.7 +26
Red Hat Enterprise Linux Server Optional (v. 7 ELS) libvirt-admin-4.5.0-36.el7_9.7, libvirt-daemon-lxc-4.5.0-36.el7_9.7, libvirt-lock-sanlock-4.5.0-36.el7_9.7 +3

Fixes 2 records

TI-2026-45271 CVE-2026-63622 · GHSA-r329-fjhj-3cw3

Libvirt: swtpm privilege escalation via symlink following

LOW 35

A flaw was found in libvirt.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-08-10 Partial fix · 11.10.0-12.9.el10_2, 10.10.0-8.11.el10_0 +8 CWE-59

TI-2026-15469 CVE-2026-18917 · GHSA-6jq9-9f7w-h7mc

Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow

LOW 35

A flaw was found in libvirt.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00182 Published 2026-08-20 Partial fix · 11.10.0-12.9.el10_2, 10.10.0-8.12.el10_0 +8 CWE-190