RHSA-2026:53721
Vulnerability from csaf_redhat - Published: 2026-08-11 17:12 - Updated: 2026-08-11 18:48Summary
Red Hat Security Advisory: OpenShift Virtualization v4.16 Images
Severity
Moderate
Notes
Topic: Red Hat OpenShift Virtualization release v4.16 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.16 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler's IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash — resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.
7.3 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64 | — |
Workaround
|
Threats
Impact
Moderate
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.16 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.16 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:53721",
"url": "https://access.redhat.com/errata/RHSA-2026:53721"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13201",
"url": "https://access.redhat.com/security/cve/CVE-2026-13201"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53721.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.16 Images",
"tracking": {
"current_release_date": "2026-08-11T18:48:08+00:00",
"generator": {
"date": "2026-08-11T18:48:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:53721",
"initial_release_date": "2026-08-11T17:12:31+00:00",
"revision_history": [
{
"date": "2026-08-11T17:12:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-11T17:12:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T18:48:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.16",
"product": {
"name": "Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1786030392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1786030065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Af3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1786030028"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1786030078"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Abf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1786030068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1786030045"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1786030070"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1786030151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1786030130"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1786030151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3Aa77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1786030071"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1786030029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1786030038"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Ad755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1786030392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3Ad12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1786030065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Afcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1786030028"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3Addb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1786030078"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1786030068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1786030045"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1786030070"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1786030151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1786030130"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1786030151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1786030071"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1786030029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Ae6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1786030038"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Huzaifa Sidhpurwala"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-13201",
"cwe": {
"id": "CWE-61",
"name": "UNIX Symbolic Link (Symlink) Following"
},
"discovery_date": "2026-06-24T13:52:04.691000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492203"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler\u0027s IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash \u2014 resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in KubeVirt\u0027s safepath package where OpenAtNoFollow obtains a file descriptor to a leaf symlink using O_PATH|O_NOFOLLOW, then downstream operations resolve the path via /proc/self/fd/N which dereferences the symlink, defeating the intended no-follow protection.\n\nThe primary impact is through notify socket hijacking: virt-handler uses safepath to resolve the path to the notify socket inside each virt-launcher pod. A namespace-level tenant with pod access can replace this socket path with a symlink to an attacker-controlled socket, enabling injection of arbitrary VM domain lifecycle events. Since virt-handler treats this as a trusted IPC channel, injected events are processed without validation and propagated to the Kubernetes API as VMI status updates. This allows the attacker to trigger incorrect VM lifecycle actions (shutdowns, restarts, migrations), corrupt VMI resource state, or crash the virt-handler process through malformed events. Because virt-handler is a single DaemonSet pod per node, a sustained crash loop denies VM management services \u2014 including console access, live migration, and lifecycle operations \u2014 for all virtual machines on that node.\n\nA secondary impact exists through the chown/chmod path: virt-handler (running as root on the node) can be tricked into applying file ownership or permission changes to arbitrary host files with hardcoded values. This modification is blind \u2014 the attacker cannot read or write file contents and remains confined to the container. In default OpenShift Virtualization deployments, SELinux mandatory access controls and RHCOS immutable filesystem layers limit the set of targetable host files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13201"
},
{
"category": "external",
"summary": "RHBZ#2492203",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492203"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13201"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201"
}
],
"release_date": "2026-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-11T17:12:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53721"
},
{
"category": "workaround",
"details": "The following measures reduce the attacker pool and limit secondary impact:\n\nReview RBAC policies to restrict pods/exec permissions on virt-launcher pods to only those users who strictly require it. This reduces the number of identities that can place symlinks in the launcher filesystem.\nEnsure SELinux is in enforcing mode (default in OpenShift). While SELinux does not prevent the notify socket hijacking path, it restricts the set of host files targetable through the chown/chmod path by blocking operations on files with protected security labels.\nRHCOS immutable filesystem layers prevent modification of core OS files through the chown/chmod path.\nNote: no mitigation currently addresses the notify socket hijacking vector. The attacker\u0027s ability to inject domain events into virt-handler is not constrained by SELinux or filesystem immutability.",
"product_ids": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:8573a4c014ffbd038501cfc93d1f8d48fadfc142b59524e953ec192ac4feee22_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d755073e64de7b98b45f015e1220b4e0df3dc60df7d3e290f127ef906e490e5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:99477e2f0d3b21475fa1b324a783ac10f86c5a0df21c71015f5b107024eeaf03_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:d12b841c94aa67e6d28fe0ec5563ae46e2cae568c122c1bcaa1a5d3bd7099bc8_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:f3195961936617043a8466764c7640881905e886ab45748a8c0a8bc3805377a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:fcaa518c0f900f9d2f205623c7d9ba6279ea8f16612ba533f34c4c9d04d848f5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3fd846a3b98b069bc6ca367d7a70618db3f1a6e604963a32a4d1cb762b6f6ec5_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:ddb739502dda369d7dd96dd3c5f141a727ef005f662cccaaaa3857d44e198260_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0f5e8f086d5570065c7fa67f06ff7b91d80f7b2f691a65426abfb4d07dbc0a07_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf33e91d3702b51bdd4aace175a5b75917298daa7a62fc53072db1f4ee985bfd_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0ee3b49ed2db55663fba7ddd01a1de45cade7960cab894bbff3700390d91b88f_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:376802fa87c574378f396b52bcaf59cf822c8da18a3ddfb4b6236183fdb1ae0c_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:370987380c06c5ff14f6618002d85396eee4914635fd8a6cc45152496f0e03bd_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:4e4b8eedb3e7b5c7b20a208f27a2be5f2eb1349ebbcb5b5e4f450e2bc85fcdbe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4d882c88d873bcdb303d36f0304f664c9901045d159c5b31dbdd1b4c7deaab63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:7b25a80d802825b1098832ffd61c4c263afb3f94d1177c43a0baf47bbb965b15_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:204cb4bfb3972f272c036127dfb1e4272c2c693fa1c95702bee8104a184820e3_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:2a4c4779a8c4c6e505125b4345819fd3e966074c3233e697cca3509b4d59da82_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:02664c718f2eb538756442aa6c1d0740bf469258806e4c4ffbf0c8d50717bbd0_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:17e3508a5dea71d53caba4c640bdf4594faa9246e7334d910cffdc114b1f9e85_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4da7d81d41ffe10f56101bfee5eabb709dd842f754e441ac3d66b74223834c63_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:a77a31ac0ea21a8475e1548863c2f7a264dd04b98133d749da285e5163f882c2_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:31d95fd911600429e52bcba262e8416f247f4eeba4c093aa2282e1952949b884_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6672bbcc5bab9b6935535115ebe34e119bc33e653149c838924bb3563292bb8a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:6543d8dbb39ee8f862175d2a463c16df01f3b3b096f624dd3a8935f69003aaff_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e6597bd7b91a962cc33f6729286885bb8e8de50d7feb5e9bbe081ec9a96e5501_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…