RHSA-2026:53684
Vulnerability from csaf_redhat - Published: 2026-08-11 17:04 - Updated: 2026-08-11 18:48Summary
Red Hat Security Advisory: OpenShift Virtualization v4.17 Images
Severity
Moderate
Notes
Topic: Red Hat OpenShift Virtualization release v4.17 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.17 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler's IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash — resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.
7.3 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64 | — |
Workaround
|
Threats
Impact
Moderate
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.17 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.17 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:53684",
"url": "https://access.redhat.com/errata/RHSA-2026:53684"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13201",
"url": "https://access.redhat.com/security/cve/CVE-2026-13201"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53684.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.17 Images",
"tracking": {
"current_release_date": "2026-08-11T18:48:10+00:00",
"generator": {
"date": "2026-08-11T18:48:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:53684",
"initial_release_date": "2026-08-11T17:04:24+00:00",
"revision_history": [
{
"date": "2026-08-11T17:04:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-11T17:04:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T18:48:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.17",
"product": {
"name": "Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1786348642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1786348530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Af5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1786348528"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3Aa5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1786348514"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1786348511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1786348516"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1786348511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1786348515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1786348518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1786348508"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1786348529"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3Ad26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1786348550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1786348528"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1786348642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1786348530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Abef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1786348528"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1786348514"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Aff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1786348511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1786348516"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1786348511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1786348515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1786348518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3Adf975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1786348508"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1786348529"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3Ae4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1786348550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1786348528"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Huzaifa Sidhpurwala"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-13201",
"cwe": {
"id": "CWE-61",
"name": "UNIX Symbolic Link (Symlink) Following"
},
"discovery_date": "2026-06-24T13:52:04.691000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492203"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler\u0027s IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash \u2014 resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in KubeVirt\u0027s safepath package where OpenAtNoFollow obtains a file descriptor to a leaf symlink using O_PATH|O_NOFOLLOW, then downstream operations resolve the path via /proc/self/fd/N which dereferences the symlink, defeating the intended no-follow protection.\n\nThe primary impact is through notify socket hijacking: virt-handler uses safepath to resolve the path to the notify socket inside each virt-launcher pod. A namespace-level tenant with pod access can replace this socket path with a symlink to an attacker-controlled socket, enabling injection of arbitrary VM domain lifecycle events. Since virt-handler treats this as a trusted IPC channel, injected events are processed without validation and propagated to the Kubernetes API as VMI status updates. This allows the attacker to trigger incorrect VM lifecycle actions (shutdowns, restarts, migrations), corrupt VMI resource state, or crash the virt-handler process through malformed events. Because virt-handler is a single DaemonSet pod per node, a sustained crash loop denies VM management services \u2014 including console access, live migration, and lifecycle operations \u2014 for all virtual machines on that node.\n\nA secondary impact exists through the chown/chmod path: virt-handler (running as root on the node) can be tricked into applying file ownership or permission changes to arbitrary host files with hardcoded values. This modification is blind \u2014 the attacker cannot read or write file contents and remains confined to the container. In default OpenShift Virtualization deployments, SELinux mandatory access controls and RHCOS immutable filesystem layers limit the set of targetable host files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13201"
},
{
"category": "external",
"summary": "RHBZ#2492203",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492203"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13201"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201"
}
],
"release_date": "2026-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-11T17:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53684"
},
{
"category": "workaround",
"details": "The following measures reduce the attacker pool and limit secondary impact:\n\nReview RBAC policies to restrict pods/exec permissions on virt-launcher pods to only those users who strictly require it. This reduces the number of identities that can place symlinks in the launcher filesystem.\nEnsure SELinux is in enforcing mode (default in OpenShift). While SELinux does not prevent the notify socket hijacking path, it restricts the set of host files targetable through the chown/chmod path by blocking operations on files with protected security labels.\nRHCOS immutable filesystem layers prevent modification of core OS files through the chown/chmod path.\nNote: no mitigation currently addresses the notify socket hijacking vector. The attacker\u0027s ability to inject domain events into virt-handler is not constrained by SELinux or filesystem immutability.",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:0f7b268d79ccecc06972a0d130dfcb1f62cb16af2117f00277e1e06cd5698593_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:1ced8552c6490cf157d5f1b04807bbd6f38e28caa91345e02d52251ae5a9d86b_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:48a3ae4f6fb550ef60a4b1779a5f8b17951275fa7628380b60a214b0d760284c_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:571318d7252d4538201550b413488962599c6e369be98f0de70c515fefc478ba_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:bef3c8b24ae6b84c02b24b3a2dcf12be3cce02edb0761d212fa73fc691ded4f6_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f5783d12d920eb84c0f1e4b917f497b9cd3eb3c45b6369ba6e0458e5750d64c9_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:29ffc663b8550d71b50d99b5a71d7eb572b3164d40a9ba93edb057d49582f7c1_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:a5e42c554e62bda46d4deb5238e9bd80fd254dc0ef43f329586dc2063074ebf6_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:239f284402a2e62a2d2cfb2626461e6006cbace18b71607c9f35104901f65c17_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:ff49ea5f5066440b685de7dd0dc56971384d9952677da94e388da8347a91718e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:00e74f253b404297893bd98e555b582d4344d21bebe090b3638b7708840bf9fd_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:15897d5570175de6f2e20d514aa3e35b17d1066566eed98d223e35cb5a3e519e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:1e6c6d044a4d66062f7dd9fb243a9c0a78f4c5ea06e0a8821b882e9474df0185_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:7ec0347ee1ddff856b5f0cfe3bc7912cc5dcc8aa84368f6cb6684ea692b42d71_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:989dc63abf3314849e42b37fb87cc25f5a51a56fd35ee3a6803a0fd91cc22508_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9f8275a5708e0aaf1a63e4468b5b5c8042b64ccce06fa992705b014674eba592_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:19d5fff928d01c556458f71296bd23fbdf76f088e33f38b1614ea1451ee65af7_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:4d5c5d09d058cc855926a1ebc4ffd06a370bf45efa515a68149794815bcff80e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:5c84fa2f9ace9a23af18e7c91f08fe619e677bcf65ae09799308bbfba09424ce_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:df975f8c629ce878e41c4c7821346391190014312dd397aa99acb32467da8023_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:1319d17552e1aaf3c8df3811d14152ff109ada7e169615b88b57761b0f7abc14_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:23d9beaf92c0db3896b91b77d31efdc429b74e27a6a46097e7b3cf53afe7af19_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:d26d57f08b39010311f0ba26965167b4ffe69f1f1a6b0bfa9fc2920353eabdbe_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:e4c66a5dfd5f70c01020d5585ec4f6f15d69530fb5106fedad55703cae0a9873_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:46ab024565a3033fbb02d9df16eb29a357c0bd97832210ad8324e6d416009026_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:63389b89c1d5c9f82d02f0c54404e137cdc74e5b1e4ad3d10ffee5c795cae721_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…