Vulnerability-Lookup

RHSA-2026:27903

Vulnerability from csaf_redhat - Published: 2026-06-22 12:44 - Updated: 2026-06-24 08:59

Summary

Red Hat Security Advisory: OpenShift Virtualization v4.21 Images

Severity

Important

Notes

Topic: Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements.

Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization v4.21 images.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-9804

A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod's filesystem. This leads to information disclosure, potentially exposing sensitive data.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64	—	Vendor Fix fix

Known not affected 39 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x		—

Threats

Impact Important

CVE-2026-35469

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64	—	Vendor Fix fix Workaround

Known not affected 39 products

Product	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x	—	Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:27903	self
https://access.redhat.com/security/cve/CVE-2026-35469	external
https://access.redhat.com/security/cve/CVE-2026-9804	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-9804	self
https://bugzilla.redhat.com/show_bug.cgi?id=2482487	external
https://www.cve.org/CVERecord?id=CVE-2026-9804	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9804	external
https://access.redhat.com/security/cve/CVE-2026-35469	self
https://bugzilla.redhat.com/show_bug.cgi?id=2457729	external
https://www.cve.org/CVERecord?id=CVE-2026-35469	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35469	external

Acknowledgments

VinSOC Thai Son Dinh, GitHub: @sondt99

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.21 images.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:27903",
        "url": "https://access.redhat.com/errata/RHSA-2026:27903"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-9804",
        "url": "https://access.redhat.com/security/cve/CVE-2026-9804"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27903.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization v4.21 Images",
    "tracking": {
      "current_release_date": "2026-06-24T08:59:58+00:00",
      "generator": {
        "date": "2026-06-24T08:59:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.0.0"
        }
      },
      "id": "RHSA-2026:27903",
      "initial_release_date": "2026-06-22T12:44:58+00:00",
      "revision_history": [
        {
          "date": "2026-06-22T12:44:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-22T12:45:11+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-24T08:59:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Container Native Virtualization 4.21",
                "product": {
                  "name": "Red Hat Container Native Virtualization 4.21",
                  "product_id": "Red Hat Container Native Virtualization 4.21",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.21::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Container Native Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1782013186"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1782012913"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1782012915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3A723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1782012939"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Aa8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1782013394"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3A7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1782012917"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1782012915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3A42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1782012912"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1782012913"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1782012918"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3A60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1782012921"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3A03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1782012945"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3A1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1782012917"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3A2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1782012915"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1782013186"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3Aa8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1782012913"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Ab4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1782012915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3A27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1782012939"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1782013394"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3A329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1782012917"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1782012915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3A58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1782012912"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Ac923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1782012913"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1782012918"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3A682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1782012921"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3A5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1782012945"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3Adacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1782012917"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3A2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1782012915"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1782013186"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3Aaddb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1782012913"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Aa62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1782012915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3Aff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1782012939"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1782013394"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3Aaeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1782012917"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1782012915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3Aafdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1782012912"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Abc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1782012913"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1782012918"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3Accd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1782012921"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3A91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1782012945"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3Abc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1782012917"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3Affd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1782012915"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64 as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x as a component of Red Hat Container Native Virtualization 4.21",
          "product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Thai Son Dinh, GitHub: @sondt99"
          ],
          "organization": "VinSOC"
        }
      ],
      "cve": "CVE-2026-9804",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-05-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2482487"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in KubeVirt\u0027s virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod\u0027s filesystem. This leads to information disclosure, potentially exposing sensitive data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-9804"
        },
        {
          "category": "external",
          "summary": "RHBZ#2482487",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482487"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-9804",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-9804"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9804",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9804"
        }
      ],
      "release_date": "2026-05-28T06:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T12:44:58+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27903"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read"
    },
    {
      "cve": "CVE-2026-35469",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-13T03:52:35+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457729"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
          "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457729",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
        }
      ],
      "release_date": "2026-04-13T23:59:59+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T12:44:58+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27903"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:3e35796163cf12c144f6e68c2cdc08aad7a0a9787d86c21ae896f975272e4910_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:407b24fd81006c833156c175b5b3282b5c983c613e49aa65824151b36f5124b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8d921ac8b01fe1ef96f1df1f4bd75fb5208076288d2918d6cfdc52f1ac6fa254_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1255de6db0f09582eaf121164e90dbe18366940b2558b9840f4a5d5bba3bf2c0_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a8c558546e6e89318ff9efccfb94d011789dafff5d9059df967763fa9662827e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:addb0f1697459cd354ca7d08592d5802aa53f3d34f1cd71ad567b7a659f144b3_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:690de966852395d00796a187820dc91f86a2eb56bbb34883bb29e42d37a09d89_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a62b253cdabe5010eec54807cf805c962199bf678c17a1dd4d2df2184516781b_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b4e3a2a5bb02e8bbba21cba4a34d398e2a29ad325c407a049e526efd698f4896_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:27faa21761a881c01425b1b1879d6172af4a950832588c5fc275756d796de2b0_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:723d98645257ab1cd6755a6be2e1a8ffc52b12efdf3de5a702799d092d876f0c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ff8e6efbcdfef2016c2f3aa449fa9c92b2584e46f107ac0291adc56b046ed1ad_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:7ee6a99028626343830aa42b6a8006d2bf03d585dbd9dbece6a8c5288ecd0bd6_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:9240b0e68700385fd5ff0bc054a28319538be8bf1c0c5071077ab3b584e200fa_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a8eb7efe7cd0ed4cef9fc201c1fed994ce30c969a2b9dd9b2bb201e6d194227d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:329d14f15c8938592a3f387e18c6a91984c14b7c308e5a768ab0d0f2a5e860af_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:7ce5f79a57ff794cad03f005eba0892a97f0f36d2efa44c31954cb6b26f7297e_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:aeda5ca46f89b1aa9fa114f806f91629104557234c4ef802bdb871141a505cc1_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1273d55c55de823a7bb516d7a5bd7b6fd5ff105d90752276a0f3de77b1db2294_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:864ab0bc96a281ddf316126491d6eef1847674570d8fd4a0a003ad0773d89956_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8fd471cf2efa55303bd36c4284d36310cc9330aecbf9b6fec05124d2b3a5b800_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:42dad76adff74b85c3ef653c4de263e8a06252213f91aecf331fc71c15ec416d_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:58cfd9970c11781e012fd1a29441d9f34c0c7fa00674e2e6069b0846804b68e2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:afdc0ee42b523e43280022c1059d21af0ef26e6a7e8f963dbcca3d0d4aead460_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8858d630ac7da25066e8e0c9092a364346952afc543f8db6c2da88c3303e5626_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bc9f2d6eae6598384d64e94c7719ca6278b3479b5822d6caaee9706bbaf49d62_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c923b03ca0af96c491cb6eead4bd95072deaf25521f4790a9715b63f90e7b8d2_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0f139421f6a28079640ec2166e9f47bc8e800d5ed0a4f74733ee92910d41cde2_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:42c795be0f550e3e558aedbeb48587db9dc2d703704b26f1f640affad1ded53e_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:977d564e0824b3759f07941443b552acc6bc09e932e31ad6e80ab7d92213853c_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:60e846f909a2b62d772b1154484131b32dbb56584a1db1ecf89183426d7b9af6_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:682520ff5c55b0d031f1c2778c694ae347b60f8c3b58a48631a4ea0ff8e47781_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:ccd1cb4761b77fdd738545ccf96553d14a06f026b5e62337cf2f6d79f0e975fa_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:03ca0747a2c0777fa51750de9dc22f97f736048c1d8e3849a290535e59dc7cb8_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:5b2c075b606ded6754bfa3e2adcc88d042d706538a7f190f160c78ab6c3dc2d8_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:91865bfb04e070d868491e3d4ab77af1e65159ca48d776eca61b9dee72970da7_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1e74b0f7988155f8df0637184565417f8d714cb83c48cfd4dbb5b3150f02de48_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bc2ecf445c2fb5f2edb6dc8ec2d14d014d67f6639536df21dd4fadd1dcab2c2e_s390x",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:dacafc4fd1495543bcb6c488e828122e0d83230b71bdd43f1cb8608c54488df4_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2dffaeb9f5c974b8dd1437def956d73547cc571bf5669af54d25e37207d2b5b5_amd64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:2f222a3141a1a7c15aa186c29e6ed56157949a94f5592820e19c07e8620a4b8c_arm64",
            "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:ffd4234737e23cd933fec7e00bc623e439f605112dab93ff7cc2e0ae232a68a9_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
    }
  ]
}

CVE-2026-35469 (GCVE-0-2026-35469)

Vulnerability from cvelistv5 – Published: 2026-04-16 21:19 – Updated: 2026-04-17 12:37

Title

SpdyStream: DOS on CRI

Summary

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/moby/spdystream/security/advis…	x_refsource_CONFIRM
https://github.com/moby/spdystream/releases/tag/v0.5.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
moby	spdystream	Affected: < 0.5.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-17T12:37:18.505269Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-17T12:37:27.329Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "spdystream",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.5.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes \u2014 all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-16T21:19:23.516Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2"
        },
        {
          "name": "https://github.com/moby/spdystream/releases/tag/v0.5.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/moby/spdystream/releases/tag/v0.5.1"
        }
      ],
      "source": {
        "advisory": "GHSA-pc3f-x583-g7j2",
        "discovery": "UNKNOWN"
      },
      "title": "SpdyStream: DOS on CRI"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-35469",
    "datePublished": "2026-04-16T21:19:23.516Z",
    "dateReserved": "2026-04-02T20:49:44.452Z",
    "dateUpdated": "2026-04-17T12:37:27.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-9804 (GCVE-0-2026-9804)

Vulnerability from cvelistv5 – Published: 2026-05-28 08:15 – Updated: 2026-06-22 19:24

Title

Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read

Summary

Severity

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

redhat

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:27903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27913	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27914	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27983	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28002	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-9804	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2482487	issue-trackingx_refsource_REDHAT

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Container Native Virtualization 4.17	Unaffected: 1781757410 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.17::el9
Red Hat	Red Hat Container Native Virtualization 4.18	Unaffected: 1781928221 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.18::el9
Red Hat	Red Hat Container Native Virtualization 4.19	Unaffected: 1781590993 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.19::el9
Red Hat	Red Hat Container Native Virtualization 4.20	Unaffected: 1781838712 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.20::el9
Red Hat	Red Hat Container Native Virtualization 4.21	Unaffected: 1782012918 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.21::el9
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4

Date Public

2026-05-28 06:00

Credits

Red Hat would like to thank Thai Son Dinh, GitHub: @sondt99 (VinSOC) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9804",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-30T01:54:32.833433Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-30T01:54:43.739Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781757410",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781928221",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781590993",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.20::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.20",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781838712",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.21::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.21",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782012918",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Thai Son Dinh, GitHub: @sondt99 (VinSOC) for reporting this issue."
        }
      ],
      "datePublic": "2026-05-28T06:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in KubeVirt\u0027s virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod\u0027s filesystem. This leads to information disclosure, potentially exposing sensitive data."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-22T19:24:45.875Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:27903",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27903"
        },
        {
          "name": "RHSA-2026:27913",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27913"
        },
        {
          "name": "RHSA-2026:27914",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27914"
        },
        {
          "name": "RHSA-2026:27983",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27983"
        },
        {
          "name": "RHSA-2026:28002",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:28002"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-9804"
        },
        {
          "name": "RHBZ#2482487",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482487"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-18T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-05-28T06:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-9804",
    "datePublished": "2026-05-28T08:15:39.779Z",
    "dateReserved": "2026-05-28T06:10:07.134Z",
    "dateUpdated": "2026-06-22T19:24:45.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:27903

CVE-2026-35469 (GCVE-0-2026-35469)

CVE-2026-9804 (GCVE-0-2026-9804)

Tags

Sightings

Nomenclature