RHSA-2026:20763
Vulnerability from csaf_redhat - Published: 2026-05-26 09:41 - Updated: 2026-09-09 15:40Summary
Red Hat Security Advisory: OpenShift Virtualization v4.17 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.17 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.17 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.
9.9 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64 | — |
Workaround
|
Threats
Impact
Important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.17 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.17 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20763",
"url": "https://access.redhat.com/errata/RHSA-2026:20763"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7374",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20763.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.17 Images",
"tracking": {
"current_release_date": "2026-09-09T15:40:16+00:00",
"generator": {
"date": "2026-09-09T15:40:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.18"
}
},
"id": "RHSA-2026:20763",
"initial_release_date": "2026-05-26T09:41:51+00:00",
"revision_history": [
{
"date": "2026-05-26T09:41:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-09T15:40:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.17",
"product": {
"name": "Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779175047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Af60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3Ab6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Adf0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174926"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174931"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174927"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174929"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3Acc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174928"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3Ae8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3Ae89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Af838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174943"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779175047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Ada024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174926"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3Abb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174931"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Ae88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174927"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174929"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174928"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3Ab77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Aa0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779174943"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Sarah Bennert",
"Stoyan Nikolov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-7374",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-04-22T07:20:25+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host\u0027s container runtime (CRI-O) socket, an attacker can hijack virt-handler\u0027s privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important privilege escalation flaw in KubeVirt\u0027s virt-handler component. An authenticated OpenShift user with edit permissions in a single namespace can exploit improper symlink validation to hijack virt-handler\u0027s privileged connection. This allows access to any Unix socket on the host, leading to potential full control of the node and the entire cluster.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "external",
"summary": "RHBZ#2463728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374"
}
],
"release_date": "2026-05-26T12:30:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T09:41:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20763"
},
{
"category": "workaround",
"details": "Update cluster RBAC to not allow exec into virt-launcher pods.",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:2d2c0bfd13946c66236272cd5d7cf198abb3ffbf39217588cd542eff760722bf_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:67cc4a2ef399e9572a6252cedc3b42dc6f1155e9b7de7c0061996346995ce28f_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1d23948d31fd81384bcf01f5a13012b1b619077f2d0aced7fcb8722c0964a814_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:66222b95d48be96b5d9cce63fd2933bff57431b0edb2a71f854ada49fc925495_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:6dead140ee37593e5eff3bff925b8ac43f0a195505692f29e80c01733cdf7152_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f60d1705981b3e4b7980fe4a0ef83beb2db983fc09200649301122954b2ef192_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:47d6bfa75b19fbf6ecd4023e380227eee868d90b95e550cd3fa26cdee5a7d9f5_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:b6b4f4d0bac4f18a023ccd5e220de6f915e804a812fe971ea18157e74a407afb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:da024dea0672d4b7476b7e64f8f8156ad0b27b8796aed8cbe7014667050bf6c3_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:df0a656449b5f51d7eb6e83b1c5cf23c992f5ed239d7fa9f4c0ca92b4d71d30a_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:1b9072b05bc6c2afd1c4d64a1b65bae999e6598c8dd2d7bebc5065bcf6f73cb2_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:bb99cc0de1e0970e83742b0f417afc1b87799ba0a529b7db669d13e5552d8968_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7f08385a74fb246b3c0f5ab51f33f94f96dea0dc0022faacd455543828e7c4e5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e88db5281c7b9d8916edd889a49364e814b9c1533b068aaec3b56106b93b57b7_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7d0946909713e52c32169c255dca73c588a9de2d24583b683b4bbf172bf848b7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7f51e6903dd1b5c7a115a239ae81e9279283580576e7a67595dbff2bc9be4a86_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:03c1cb7e689a680c3ae11c6bca67ed6cdf9c41c73e82afc6a00aa5350b52ccbb_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:39669b642ade3ad78b6f8679ead3c81e8e0f292195feb08adc328898c37c9eba_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0a9b84aa699dda911cd407b5b7f1d65760d8c60bcf5f368dd6fa21cc503dc46d_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:cc6783b9433cefab6547c96f7e0dfc36efc3e453ffb22a7ded5ac1974f4fb499_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:e8f5225c3db3dd59b8b97c45b653f06d2569a050d9f0269cbf3379e9bbfd7492_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:b77ea89568c5cf1c6e840a81d533b5ebfadd92e494d2b351d6ad6c44227ef003_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e89bf5e9978db47b54a425587cf7c3b037d6fd293256e9bc3f0373daf8fc7241_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a0ae3ea3c59d4f189db05412a3e9b0913396aeaf86d548ca63c821d96e9ac933_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:f838fcc8f14d75977cbb2108ff7648131b6745bb6565d4fe962184f2050dae01_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…