Red Hat Security Advisory

RHSA-2026:74424

libvirt security, bug fix, and enhancement update

Released 2026-10-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libvirt-11.10.0-12.7.el9_8, libvirt-client-11.10.0-12.7.el9_8, libvirt-client-qemu-11.10.0-12.7.el9_8 +26
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libvirt-daemon-plugin-sanlock-11.10.0-12.7.el9_8, libvirt-devel-11.10.0-12.7.el9_8, libvirt-docs-11.10.0-12.7.el9_8

Fixes 2 records

TI-2026-45271 CVE-2026-63622 · GHSA-r329-fjhj-3cw3

Libvirt: swtpm privilege escalation via symlink following

LOW 35

A flaw was found in libvirt.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-08-10 Partial fix · 11.10.0-12.9.el10_2, 10.10.0-8.11.el10_0 +8 CWE-59

TI-2026-15469 CVE-2026-18917 · GHSA-6jq9-9f7w-h7mc

Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow

LOW 35

A flaw was found in libvirt.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00182 Published 2026-08-20 Partial fix · 11.10.0-12.9.el10_2, 10.10.0-8.12.el10_0 +8 CWE-190