SUSE-SU-2026:20551-1

Vulnerability from csaf_suse - Published: 2026-02-27 08:49 - Updated: 2026-02-27 08:49
Summary
Security update for kubevirt

Notes

Title of the patch
Security update for kubevirt
Description of the patch
This update for kubevirt fixes the following issues: Update to version 1.7.0 (bsc#1257128). Security issues fixed: - CVE-2025-64435: logic flaw in the virt-controller can lead to incorrect status updates and potentially causing a DoS (bsc#1253189). - CVE-2024-45310: kubevirt vendored github.com/opencontainers/runc/libcontainer/utils: runc can be tricked into creating empty files/directories on host (bsc#1257422). - CVE-2025-22872: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241772). - CVE-2025-64432: fail to correctly validate certain fields in the client TLS certificate may allow an attacker to bypass existing RBAC controls (bsc#1253181). - CVE-2025-64433: improper symlink handling can allow to read arbitrary files (bsc#1253185). - CVE-2025-64434: compromising virt-handler instance can lead to impersonate virt-api and execute privileged operations (bsc#1253186). - CVE-2025-64437: mishandling of symlinks can lead to compromising the CIA (bsc#1253194). - CVE-2025-64324: a logic bug that allows an attacker to read and write arbitrary files owned by more privileged users (bsc#1253748). Other updates and bugfixes: - Upstream now uses stateless firmware for CoCo VMs.
Patchnames
SUSE-SL-Micro-6.2-319
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for kubevirt",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for kubevirt fixes the following issues:\n\nUpdate to version 1.7.0 (bsc#1257128).\n\nSecurity issues fixed:\n\n  - CVE-2025-64435: logic flaw in the virt-controller can lead to incorrect status updates and potentially causing a DoS\n    (bsc#1253189).\n  - CVE-2024-45310: kubevirt vendored github.com/opencontainers/runc/libcontainer/utils: runc can be tricked into\n    creating empty files/directories on host (bsc#1257422).\n  - CVE-2025-22872: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction\n    (bsc#1241772).\n  - CVE-2025-64432: fail to correctly validate certain fields in the client TLS certificate may allow an attacker to\n    bypass existing RBAC controls (bsc#1253181).\n  - CVE-2025-64433: improper symlink handling can allow to read arbitrary files (bsc#1253185).\n  - CVE-2025-64434: compromising virt-handler instance can lead to impersonate virt-api and execute privileged operations\n    (bsc#1253186).\n  - CVE-2025-64437: mishandling of symlinks can lead to compromising the CIA (bsc#1253194).\n  - CVE-2025-64324: a logic bug that allows an attacker to read and write arbitrary files owned by more privileged users\n    (bsc#1253748).\n\nOther updates and bugfixes:\n\n  - Upstream now uses stateless firmware for CoCo VMs.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SL-Micro-6.2-319",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20551-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:20551-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620551-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:20551-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-March/044565.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1241772",
        "url": "https://bugzilla.suse.com/1241772"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253181",
        "url": "https://bugzilla.suse.com/1253181"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253185",
        "url": "https://bugzilla.suse.com/1253185"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253186",
        "url": "https://bugzilla.suse.com/1253186"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253189",
        "url": "https://bugzilla.suse.com/1253189"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253194",
        "url": "https://bugzilla.suse.com/1253194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1253748",
        "url": "https://bugzilla.suse.com/1253748"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257128",
        "url": "https://bugzilla.suse.com/1257128"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257422",
        "url": "https://bugzilla.suse.com/1257422"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-45310 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-45310/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-22872 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-22872/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64324 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64324/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64432 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64432/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64433 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64433/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64434 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64434/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64435 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64435/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64437 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64437/"
      }
    ],
    "title": "Security update for kubevirt",
    "tracking": {
      "current_release_date": "2026-02-27T08:49:48Z",
      "generator": {
        "date": "2026-02-27T08:49:48Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:20551-1",
      "initial_release_date": "2026-02-27T08:49:48Z",
      "revision_history": [
        {
          "date": "2026-02-27T08:49:48Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kubevirt-manifests-1.7.0-160000.1.1.x86_64",
                "product": {
                  "name": "kubevirt-manifests-1.7.0-160000.1.1.x86_64",
                  "product_id": "kubevirt-manifests-1.7.0-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kubevirt-virtctl-1.7.0-160000.1.1.x86_64",
                "product": {
                  "name": "kubevirt-virtctl-1.7.0-160000.1.1.x86_64",
                  "product_id": "kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.2",
                "product": {
                  "name": "SUSE Linux Micro 6.2",
                  "product_id": "SUSE Linux Micro 6.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:transactional"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-manifests-1.7.0-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64"
        },
        "product_reference": "kubevirt-manifests-1.7.0-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-virtctl-1.7.0-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        },
        "product_reference": "kubevirt-virtctl-1.7.0-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-45310",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-45310"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with `os.MkdirAll`. While this could be used to create empty files, existing files would not be truncated. An attacker must have the ability to start containers using some kind of custom volume configuration. Containers using user namespaces are still affected, but the scope of places an attacker can create inodes can be significantly reduced. Sufficiently strict LSM policies (SELinux/Apparmor) can also in principle block this attack -- we suspect the industry standard SELinux policy may restrict this attack\u0027s scope but the exact scope of protection hasn\u0027t been analysed. This is exploitable using runc directly as well as through Docker and Kubernetes. The issue is fixed in runc v1.1.14 and v1.2.0-rc3.\n\nSome workarounds are available. Using user namespaces restricts this attack fairly significantly such that the attacker can only create inodes in directories that the remapped root user/group has write access to. Unless the root user is remapped to an actual\nuser on the host (such as with rootless containers that don\u0027t use `/etc/sub[ug]id`), this in practice means that an attacker would only be able to create inodes in world-writable directories. A strict enough SELinux or AppArmor policy could in principle also restrict the scope if a specific label is applied to the runc runtime, though neither the extent to which the standard existing policies block this attack nor what exact policies are needed to sufficiently restrict this attack have been thoroughly tested.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-45310",
          "url": "https://www.suse.com/security/cve/CVE-2024-45310"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230092 for CVE-2024-45310",
          "url": "https://bugzilla.suse.com/1230092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257413 for CVE-2024-45310",
          "url": "https://bugzilla.suse.com/1257413"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "low"
        }
      ],
      "title": "CVE-2024-45310"
    },
    {
      "cve": "CVE-2025-22872",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-22872"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. \u003cmath\u003e, \u003csvg\u003e, etc contexts).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-22872",
          "url": "https://www.suse.com/security/cve/CVE-2025-22872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1241710 for CVE-2025-22872",
          "url": "https://bugzilla.suse.com/1241710"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-22872"
    },
    {
      "cve": "CVE-2025-64324",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64324"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or directory owned by the user with UID 107 into a VM. However, prior to version 1.6.1 and 1.7.0, the implementation of this feature and more specifically the `DiskOrCreate` option (which creates a file if it doesn\u0027t exist) has a logic bug that allows an attacker to read and write arbitrary files owned by more privileged users on the host system. Versions 1.6.1 and 1.7.0 fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64324",
          "url": "https://www.suse.com/security/cve/CVE-2025-64324"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253748 for CVE-2025-64324",
          "url": "https://bugzilla.suse.com/1253748"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-64324"
    },
    {
      "cve": "CVE-2025-64432",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64432"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer\u0027s authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to correctly authenticate the client when receiving API requests over mTLS. In particular, it fails to validate the CN (Common Name) field in the received client TLS certificates against the set of allowed values defined in the extension-apiserver-authentication configmap. Failre to validate certain fields in the client TLS certificate may allow an attacker to bypass existing RBAC controls by directly communicating with the aggregated API server, impersonating the Kubernetes API server and its aggregator component. This issue is fixed in versions 1.5.3 and 1.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64432",
          "url": "https://www.suse.com/security/cve/CVE-2025-64432"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253181 for CVE-2025-64432",
          "url": "https://bugzilla.suse.com/1253181"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64432"
    },
    {
      "cve": "CVE-2025-64433",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64433"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-launcher pod\u0027s file system. This issue stems from improper symlink handling when mounting PVC disks into a VM. Specifically, if a malicious user has full or partial control over the contents of a PVC, they can create a symbolic link that points to a file within the virt-launcher pod\u0027s file system. Since libvirt can treat regular files as block devices, any file on the pod\u0027s file system that is symlinked in this way can be mounted into the VM and subsequently read. Although a security mechanism exists where VMs are executed as an unprivileged user with UID 107 inside the virt-launcher container, limiting the scope of accessible resources, this restriction is bypassed due to a second vulnerability. The latter causes the ownership of any file intended for mounting to be changed to the unprivileged user with UID 107 prior to mounting. As a result, an attacker can gain access to and read arbitrary files located within the virt-launcher pod\u0027s file system or on a mounted PVC from within the guest VM. This vulnerability is fixed in 1.5.3 and 1.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64433",
          "url": "https://www.suse.com/security/cve/CVE-2025-64433"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253185 for CVE-2025-64433",
          "url": "https://bugzilla.suse.com/1253185"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64433"
    },
    {
      "cve": "CVE-2025-64434",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64434"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler (via verifyPeerCert), an attacker who compromises a virt-handler instance, could exploit these shared credentials to impersonate virt-api and execute privileged operations against other virt-handler instances potentially compromising the integrity and availability of the VM managed by it. This vulnerability is fixed in 1.5.3 and 1.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64434",
          "url": "https://www.suse.com/security/cve/CVE-2025-64434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253186 for CVE-2025-64434",
          "url": "https://bugzilla.suse.com/1253186"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64434"
    },
    {
      "cve": "CVE-2025-64435",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64435"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod associated with the VMI. This can mislead the virt-controller into associating the fake pod with the VMI, resulting in incorrect status updates and potentially causing a DoS (Denial-of-Service). This vulnerability is fixed in 1.7.0-beta.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64435",
          "url": "https://www.suse.com/security/cve/CVE-2025-64435"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253189 for CVE-2025-64435",
          "url": "https://bugzilla.suse.com/1253189"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64435"
    },
    {
      "cve": "CVE-2025-64437",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64437"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler does not verify whether the launcher-sock is a symlink or a regular file. This oversight can be exploited, for example, to change the ownership of arbitrary files on the host node to the unprivileged user with UID 107 (the same user used by virt-launcher) thus, compromising the CIA (Confidentiality, Integrity and Availability) of data on the host. To successfully exploit this vulnerability, an attacker should be in control of the file system of the virt-launcher pod. This vulnerability is fixed in 1.5.3 and 1.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
          "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64437",
          "url": "https://www.suse.com/security/cve/CVE-2025-64437"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253194 for CVE-2025-64437",
          "url": "https://bugzilla.suse.com/1253194"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:kubevirt-manifests-1.7.0-160000.1.1.x86_64",
            "SUSE Linux Micro 6.2:kubevirt-virtctl-1.7.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-27T08:49:48Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-64437"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.