RHSA-2026:20975
Vulnerability from csaf_redhat - Published: 2026-05-26 15:39 - Updated: 2026-09-09 15:40Summary
Red Hat Security Advisory: OpenShift Virtualization v4.16 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.16 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.16 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.
9.9 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64 | — |
Workaround
|
Threats
Impact
Important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.16 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.16 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20975",
"url": "https://access.redhat.com/errata/RHSA-2026:20975"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7374",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20975.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.16 Images",
"tracking": {
"current_release_date": "2026-09-09T15:40:19+00:00",
"generator": {
"date": "2026-09-09T15:40:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.18"
}
},
"id": "RHSA-2026:20975",
"initial_release_date": "2026-05-26T15:39:10+00:00",
"revision_history": [
{
"date": "2026-05-26T15:39:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-09T15:40:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.16",
"product": {
"name": "Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1778861357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3Abad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1778861273"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Aac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1778861269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1778861243"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Af6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1778861270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1778999683"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1778861265"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1778999678"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1778861264"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1778861268"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1778861274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1778861279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Ac431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1778861265"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1778861357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1778861273"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Ae15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1778861269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3Abda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1778861243"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Abf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1778861270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1778999683"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Af3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1778861265"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3Ab19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1778999678"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1778861264"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1778861268"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1778861274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3Ac847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1778861279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1778861265"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64 as a component of Red Hat Container Native Virtualization 4.16",
"product_id": "Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.16"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Sarah Bennert",
"Stoyan Nikolov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-7374",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-04-22T07:20:25+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host\u0027s container runtime (CRI-O) socket, an attacker can hijack virt-handler\u0027s privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important privilege escalation flaw in KubeVirt\u0027s virt-handler component. An authenticated OpenShift user with edit permissions in a single namespace can exploit improper symlink validation to hijack virt-handler\u0027s privileged connection. This allows access to any Unix socket on the host, leading to potential full control of the node and the entire cluster.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "external",
"summary": "RHBZ#2463728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374"
}
],
"release_date": "2026-05-26T12:30:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T15:39:10+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20975"
},
{
"category": "workaround",
"details": "Update cluster RBAC to not allow exec into virt-launcher pods.",
"product_ids": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:01d8b8805fd275229eed0d6dbc477f779fcb9302409538948fd6856701d16b90_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:23b0fe8fd19443d08469b8fe93a471f79039c87ca94408f6dd675407048a70ec_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:97493024b6620540c053d89c6a3b02e8ae8008a2342d95bb8f5dc1ca4abf9a5e_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:bad30ab59a88284693f07d1129e47d7a9251325d6f120a644808049c63858b26_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:ac61513d0d8d184be43cd58f3c700226b2090384b3ee1ac5b891b03dfe91aed7_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e15f0631d5a8883221df836f3dffece8ceddd797d1f3156a5ff3d7f822040fda_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:81a4fa07ba02640943a15612736d32c164b10c208c107ff261ed9399cb0c32fc_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:bda0942d9948e2576cd941c73b1c90197c26842c78b1dd0f9930cce10601f889_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:bf3c69bb43e28fc348101888da5cd3103468a9b5194c80263a4c3c2f590d5017_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f6a80e08fba710719264d4c1faafe36e5c4155cbfdd51a79de1e55e9997b46a0_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:717f3d3fc2d767f4c25b4e9f410eb2da697cd2672b830ec3e8c9a9ff76c79dfe_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:74c1d0bdb69e09e17359e1f7ded96fe59c89adc8563aefb18702bd14eac5bf1a_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:48d09ebba3d0c513a9ccf1bd0eab5e7bce4aa42a23d8cb620ce6dd8d95e65c05_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:f3141446e09b1f9660d7eb57728a5a7c255df9292ad7a6879b7d44fd9e14c982_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:3f69586b231ff1b95ed8805f734465ebb2cb1b2a50132836d8d2bd2e253b2407_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b19b005a015d85dcf3da7dd54a07b1e6f9e4eee84db1cba9e44808611dc496e5_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0d13f9c5f619ff3d58d363214fc45625ce64833bc62d66c33efb2ef191090316_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:6eadcf10463c5789188d3638e30a809ac2a4cdc9014c6f6e82b4d8f4bea967a7_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:833e84f48ae091129fd3967488cb59e1dcef6ad240e4fe1580af4f640c524a1c_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:9ce927232dbc0fd2427ca5990801013c1ba92b2af466eabafb99b0eaa405c900_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:6b730620ed5a6f37170c7ef44a5883e6d8787e30862525fc8ff605ec5e612235_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8bd7de7b45ae11dd92debd4cb98ef01082bfc46e79ded2ac0529bd8f8f08dd59_amd64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:c847a1c36e65c2096e964ab53e47f4bb6490cba74073ab25665c7d6250f78503_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96bbb1af0c87e73b6d5fad7803e1625be6dcaef1021e8e7e53305a37fa0ab8ea_arm64",
"Red Hat Container Native Virtualization 4.16:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c431ca45ea5e2185c00cfb051d6ddbac9dd14dc2e3bf064354f71af61709331c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…