Vulnerability-Lookup

RHSA-2026:27914

Vulnerability from csaf_redhat - Published: 2026-06-22 12:56 - Updated: 2026-06-24 08:59

Summary

Red Hat Security Advisory: OpenShift Virtualization v4.19 Images

Severity

Important

Notes

Topic: Red Hat OpenShift Virtualization release v4.19 is now available with updates to packages and images that fix several bugs and add enhancements.

Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization v4.19 images.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-9804

A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod's filesystem. This leads to information disclosure, potentially exposing sensitive data.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64	—	Vendor Fix fix

Known not affected 36 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64		—
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64		—

Threats

Impact Important

CVE-2026-35469

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64	—	Vendor Fix fix Workaround

Known not affected 36 products

Product	Version	Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64	—	Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64	—	Workaround

Threats

Impact Important

References

13 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:27914	self
https://access.redhat.com/security/cve/CVE-2026-35469	external
https://access.redhat.com/security/cve/CVE-2026-9804	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-9804	self
https://bugzilla.redhat.com/show_bug.cgi?id=2482487	external
https://www.cve.org/CVERecord?id=CVE-2026-9804	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9804	external
https://access.redhat.com/security/cve/CVE-2026-35469	self
https://bugzilla.redhat.com/show_bug.cgi?id=2457729	external
https://www.cve.org/CVERecord?id=CVE-2026-35469	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35469	external

Acknowledgments

VinSOC Thai Son Dinh, GitHub: @sondt99

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release v4.19 is now available with updates to packages and images that fix several bugs and add enhancements.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.19 images.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:27914",
        "url": "https://access.redhat.com/errata/RHSA-2026:27914"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-9804",
        "url": "https://access.redhat.com/security/cve/CVE-2026-9804"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27914.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization v4.19 Images",
    "tracking": {
      "current_release_date": "2026-06-24T08:59:58+00:00",
      "generator": {
        "date": "2026-06-24T08:59:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.0.0"
        }
      },
      "id": "RHSA-2026:27914",
      "initial_release_date": "2026-06-22T12:56:43+00:00",
      "revision_history": [
        {
          "date": "2026-06-22T12:56:43+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-22T12:56:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-24T08:59:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Container Native Virtualization 4.19",
                "product": {
                  "name": "Red Hat Container Native Virtualization 4.19",
                  "product_id": "Red Hat Container Native Virtualization 4.19",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.19::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Container Native Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1781592216"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1781591070"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Aa515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1781591072"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3A52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1781590955"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1781592111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3Ad9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1781593002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Aa82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1781590998"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3A3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1781592958"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Aa9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1781593188"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1781590993"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3Af85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1781591165"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3Af28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1781591067"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3Abd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1781591030"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1781592216"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3Ad4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1781591070"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1781591072"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3A14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1781590955"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1781592111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3Ac9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1781593002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Aa27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1781590998"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3A8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1781592958"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1781593188"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1781590993"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3A292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1781591165"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3Ac2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1781591067"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3Aa34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1781591030"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Ad9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1781592216"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1781591070"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Aec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1781591072"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3A17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1781590955"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Aa792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1781592111"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3A337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1781593002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Aafadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1781590998"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3A44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1781592958"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1781593188"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1781590993"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3Ad461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1781591165"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3A9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1781591067"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3A89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1781591030"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64 as a component of Red Hat Container Native Virtualization 4.19",
          "product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Thai Son Dinh, GitHub: @sondt99"
          ],
          "organization": "VinSOC"
        }
      ],
      "cve": "CVE-2026-9804",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-05-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2482487"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in KubeVirt\u0027s virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod\u0027s filesystem. This leads to information disclosure, potentially exposing sensitive data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-9804"
        },
        {
          "category": "external",
          "summary": "RHBZ#2482487",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482487"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-9804",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-9804"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9804",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9804"
        }
      ],
      "release_date": "2026-05-28T06:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T12:56:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27914"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read"
    },
    {
      "cve": "CVE-2026-35469",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-13T03:52:35+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457729"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
          "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457729",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
        }
      ],
      "release_date": "2026-04-13T23:59:59+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T12:56:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27914"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:021c391d7fc4f67c7bd9ecc7684ea23a6a4902170b2b4e666c42fc38bd781d56_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:51a8ce81353343cd564499cd4915dcfa7e3d31de7291eaf9b0edadc7fdccec74_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d9e72d04c02f84437ac33304da4931789ca6958b16a321447e4b8e417ccdf910_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:002d380514273420bc180a6de174e1b90a288ecfc703bfd6b94f424c607560c1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:713c559648c386010bcc2cf6c70111e9d8752677a313383f9c422a0106addfe4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d4f980f0f156f859b61656bc1d2911e67df0cdca109d7479fba4d127bb4f8e85_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:38cfb8307cf26f315b47f5e247a7983be6c8a5ffd01ff0b1d72cc3761cc07e39_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:a515f295610f4a956fa852963afb3e4093a1e3854510c0087ba80fe5ec96ce48_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ec968849bb7710250806999a1b9abe56d0a6ba3ff2e6726647c3f9f770320488_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:14cf5e379dc448f8824bce13aa0b4d4558e02db52e73f12d44d19414591bd3c3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:17e15d4256ef0fb8a9fb5bd283900b184589ddf74b68cbcd6207564fc31dedf1_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:52bb98437d9d09d818c1c3c48e2e56277d7caf06dae3b946cf00731ced8de1b2_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:542c0d7c1fb9f2d5b0c3d0acc71b7179bfd1dd4ace358597ef411e9c6ca9b502_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:70c6e9c00d975145511f6fba4a0ba5d64044ed90cca93227a0867b442695128a_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a792b3e1810a13ad751cb476d7015faf8f74bb3f643b690bd057776d1d033ee0_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:337b9f9d61f626ec4787d8e29263b7c7659f9be4e726683642605396ef4f2323_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:c9c4c460c0f3f777ddb6e5a96bc713e1e93b65ae15bf0824b6546b562714c345_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d9ac41bd11bc3949eaaa91fb428e1d7b5072ed5146598804e0b8050ed713b9f3_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a27a91a06b040869dc9ba2d41ad5997509adfedf8b685e88f472da45ac5231b3_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a82ae31f8417b2894e13012cac87aaf48aba39a0b1d1702186ad38f2ef658755_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:afadbc3feffba0042274f1836f1a6ed4e77c931e83c59f26ce694d539433fffd_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3123a7926db27ffb17d9e0b88937a5110f4fe3c3b0648dcfa8ba6dafce376da4_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:44ed2f3b997158dd821397f3f9615d4767ebcdeea81d4286696a012e35cc8535_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:8f182013008e115fb412a63a80b58119b8cfa899a3b7b816396af422119fe1c1_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1233b7b0684b5ba7eb4b413a17cd70c659ad230c70495b5277cd3139ceb40a9d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:393d78fb4afa333018f14dc0a6595f612c6f2fd1370b26e7a0d21cb52eccd1f4_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a9a820af65a6c5da1d7f708f24d226ef2daff9d886305e88a632b32dc0d62227_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:0721f8a624942860779f18691b6d0fbb028460c6fbff113d28e59f6d31b2270a_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:38749d57d482311927812de109b1dffde2cccac836fb783e15a8899ec589a94d_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4f579d5f675cbbcac309dd3d2dbf484628fa4cc0f007695a85c1c72e224c840c_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:292908ab9e73389f2956df740c7f31fbdbb4f9c2c8b6df34c93b72946efed045_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:d461f36b150c763e91011dd192a62b294cd027f049795a1f4728663acde464a3_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:f85c8641fdf64c212fd1e184a8c2e2dee8e5985392c76584f63e5a707301dd1a_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:9f6589388d748eaff4cd47739e0a3703ec04ea6aaf645ed275b7e17e7c177654_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c2b438621f72525900ced5e7ba9d521c86eb1645cad67b8e4d6991817ee6dd26_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:f28323d918a8994fe3f7df517cae17cb506227b400347a80338b3d9038cd5d50_amd64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:89206a31336de71e5e2ae923b2dec647b0323035b5ba51a04d78ac1c6b7e9398_s390x",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a34ae4abb6b4511ef2ad1ffb3451c27b2a942686d43e95dfb85378086efdb154_arm64",
            "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:bd5dc2b15d7645c3bc20bb3004b421cf9b09a8200953eb2e61ea29cd36f8d127_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
    }
  ]
}

CVE-2026-35469 (GCVE-0-2026-35469)

Vulnerability from cvelistv5 – Published: 2026-04-16 21:19 – Updated: 2026-04-17 12:37

Title

SpdyStream: DOS on CRI

Summary

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/moby/spdystream/security/advis…	x_refsource_CONFIRM
https://github.com/moby/spdystream/releases/tag/v0.5.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
moby	spdystream	Affected: < 0.5.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-17T12:37:18.505269Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-17T12:37:27.329Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "spdystream",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.5.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes \u2014 all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-16T21:19:23.516Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2"
        },
        {
          "name": "https://github.com/moby/spdystream/releases/tag/v0.5.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/moby/spdystream/releases/tag/v0.5.1"
        }
      ],
      "source": {
        "advisory": "GHSA-pc3f-x583-g7j2",
        "discovery": "UNKNOWN"
      },
      "title": "SpdyStream: DOS on CRI"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-35469",
    "datePublished": "2026-04-16T21:19:23.516Z",
    "dateReserved": "2026-04-02T20:49:44.452Z",
    "dateUpdated": "2026-04-17T12:37:27.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-9804 (GCVE-0-2026-9804)

Vulnerability from cvelistv5 – Published: 2026-05-28 08:15 – Updated: 2026-06-22 19:24

Title

Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read

Summary

Severity

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

redhat

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:27903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27913	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27914	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27983	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28002	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-9804	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2482487	issue-trackingx_refsource_REDHAT

Impacted products

6 products

Vendor	Product	Version
Red Hat	Red Hat Container Native Virtualization 4.17	Unaffected: 1781757410 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.17::el9
Red Hat	Red Hat Container Native Virtualization 4.18	Unaffected: 1781928221 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.18::el9
Red Hat	Red Hat Container Native Virtualization 4.19	Unaffected: 1781590993 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.19::el9
Red Hat	Red Hat Container Native Virtualization 4.20	Unaffected: 1781838712 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.20::el9
Red Hat	Red Hat Container Native Virtualization 4.21	Unaffected: 1782012918 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.21::el9
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4

Date Public

2026-05-28 06:00

Credits

Red Hat would like to thank Thai Son Dinh, GitHub: @sondt99 (VinSOC) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9804",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-30T01:54:32.833433Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-30T01:54:43.739Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781757410",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781928221",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781590993",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.20::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.20",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781838712",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.21::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver-rhel9",
          "product": "Red Hat Container Native Virtualization 4.21",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782012918",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-exportserver",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Thai Son Dinh, GitHub: @sondt99 (VinSOC) for reporting this issue."
        }
      ],
      "datePublic": "2026-05-28T06:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in KubeVirt\u0027s virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod\u0027s filesystem. This leads to information disclosure, potentially exposing sensitive data."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-22T19:24:45.875Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:27903",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27903"
        },
        {
          "name": "RHSA-2026:27913",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27913"
        },
        {
          "name": "RHSA-2026:27914",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27914"
        },
        {
          "name": "RHSA-2026:27983",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:27983"
        },
        {
          "name": "RHSA-2026:28002",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:28002"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-9804"
        },
        {
          "name": "RHBZ#2482487",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482487"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-18T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-05-28T06:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-9804",
    "datePublished": "2026-05-28T08:15:39.779Z",
    "dateReserved": "2026-05-28T06:10:07.134Z",
    "dateUpdated": "2026-06-22T19:24:45.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:27914

CVE-2026-35469 (GCVE-0-2026-35469)

CVE-2026-9804 (GCVE-0-2026-9804)

Tags

Sightings

Nomenclature