RHSA-2026:53728
Vulnerability from csaf_redhat - Published: 2026-08-11 17:13 - Updated: 2026-08-13 03:11A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler's IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash — resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64 | — |
Workaround
|
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64 | — |
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.21 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:53728",
"url": "https://access.redhat.com/errata/RHSA-2026:53728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13201",
"url": "https://access.redhat.com/security/cve/CVE-2026-13201"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53728.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.21 Images",
"tracking": {
"current_release_date": "2026-08-13T03:11:58+00:00",
"generator": {
"date": "2026-08-13T03:11:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:53728",
"initial_release_date": "2026-08-11T17:13:38+00:00",
"revision_history": [
{
"date": "2026-08-11T17:13:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-11T17:13:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-13T03:11:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.21",
"product": {
"name": "Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.21::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1785830086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1785829756"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1785829809"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1785829747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Aa915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1785829732"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1785829819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1785829757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1785829855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Abdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1785829833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1785829738"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1785829701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1785829795"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1785829903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3A719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1785829728"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Ada35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1785830086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1785829756"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1785829809"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1785829747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1785829732"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1785829819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1785829757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3Aecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1785829855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1785829833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1785829738"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1785829701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1785829795"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Aa7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1785829903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3Af720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1785829728"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Af9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1785830086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1785829756"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1785829809"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1785829747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1785829732"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3Af5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1785829819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1785829757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3Ac98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1785829855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1785829833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1785829738"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3Afd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1785829701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3Aadb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1785829795"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1785829903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3Ac7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1785829728"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Huzaifa Sidhpurwala"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-13201",
"cwe": {
"id": "CWE-61",
"name": "UNIX Symbolic Link (Symlink) Following"
},
"discovery_date": "2026-06-24T13:52:04.691000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492203"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler\u0027s IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash \u2014 resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in KubeVirt\u0027s safepath package where OpenAtNoFollow obtains a file descriptor to a leaf symlink using O_PATH|O_NOFOLLOW, then downstream operations resolve the path via /proc/self/fd/N which dereferences the symlink, defeating the intended no-follow protection.\n\nThe primary impact is through notify socket hijacking: virt-handler uses safepath to resolve the path to the notify socket inside each virt-launcher pod. A namespace-level tenant with pod access can replace this socket path with a symlink to an attacker-controlled socket, enabling injection of arbitrary VM domain lifecycle events. Since virt-handler treats this as a trusted IPC channel, injected events are processed without validation and propagated to the Kubernetes API as VMI status updates. This allows the attacker to trigger incorrect VM lifecycle actions (shutdowns, restarts, migrations), corrupt VMI resource state, or crash the virt-handler process through malformed events. Because virt-handler is a single DaemonSet pod per node, a sustained crash loop denies VM management services \u2014 including console access, live migration, and lifecycle operations \u2014 for all virtual machines on that node.\n\nA secondary impact exists through the chown/chmod path: virt-handler (running as root on the node) can be tricked into applying file ownership or permission changes to arbitrary host files with hardcoded values. This modification is blind \u2014 the attacker cannot read or write file contents and remains confined to the container. In default OpenShift Virtualization deployments, SELinux mandatory access controls and RHCOS immutable filesystem layers limit the set of targetable host files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13201"
},
{
"category": "external",
"summary": "RHBZ#2492203",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492203"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13201"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201"
}
],
"release_date": "2026-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-11T17:13:38+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53728"
},
{
"category": "workaround",
"details": "The following measures reduce the attacker pool and limit secondary impact:\n\nReview RBAC policies to restrict pods/exec permissions on virt-launcher pods to only those users who strictly require it. This reduces the number of identities that can place symlinks in the launcher filesystem.\nEnsure SELinux is in enforcing mode (default in OpenShift). While SELinux does not prevent the notify socket hijacking path, it restricts the set of host files targetable through the chown/chmod path by blocking operations on files with protected security labels.\nRHCOS immutable filesystem layers prevent modification of core OS files through the chown/chmod path.\nNote: no mitigation currently addresses the notify socket hijacking vector. The attacker\u0027s ability to inject domain events into virt-handler is not constrained by SELinux or filesystem immutability.",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-11T17:13:38+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53728"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4bf86c788191a8d81cf0659752510469c999c676fad359ef790c8c5ad9add216_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:da35e3474aefdd42b58d4e9498df8a348162c682804d5d61ac8e50aeaa3b2b98_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f9f4560f8c8b7461ccdffc712ab05ac7accd0222e32cbf322030f7efacdd0752_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2d575188efd31a74486322d84e84e62c0dd6a2ee542db8cd3ad8c99b7cd9f7d3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:2e9f6b38bbf4e6a48c4b936b4b5eb116be237f507f017345e1f7ca79ebdc7a15_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:9044ead847df9b0a56d0f4aeaa6d9052c0d69e57f20555aa0981605752aee375_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1446ba7d65f480a5036e528dad8ae7126b604423ea1cb6fb626ceab4d21a644b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1ec852eb243c7ce9244887ecce91f42801f88efd91f314de1524ed89f601f9fe_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:279df5ddd149cd31ca26dae46e154410ba3394b3e72488de19e1112c9bf84e70_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:581e2109e7a5953761984290f10e84a478bd75bc73b5d900b5956ddc319ef315_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:769969f04a3c4bdd964720db6784a86402305c58d16aea45d11294b388eea32a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:98187476f1fa8fa9c91663ccb64995d77e880c47d44d3930ab642a71baed3923_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a8ac5f07d563a8e3fe8ab1499e7e3966c4ae352981dc0e857cbf6a880f579f_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:3c9095ca3261e747f5735ba2bd50e19e3c638ed22e01aa6310d993ef13c7c39a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a915d646b8b62d50b00ad020ccc0f108bd0d7ffa25bcd61df28b1afa1c4728df_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:43f112bebd52d117d69a03a343ff4eeeca46e02371523b87eb710740a1d5c47e_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:867646b237904d2808d847f56c66917ba796c6095c1a28a0272df1c084695ea7_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f5d6ec45cba17236c5d9b14bb0de46fd3970020bd4d3cc9529017379a7d7b867_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8517080f3b37b9ac0eca41f7c2298a7ac273c6ade123a54edd38ed2956b58480_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8af23e4ed67b50a6232d3a4276226e2a9bc957e067a96047fcfcaf6df017a0ef_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:98f9b5b0ee258e562a751f27bb68b7edb49e50f9e9febe3297a1892331264ffb_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:32fb284469021d61a0c9161ad272c7e1a7b7d855f559ceafbc9f2015e5f1b9fa_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c98085fbcc4fb39353b662a5ac3b641b0dcf4c224fc90d01060fc67097b7d855_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ecc15205fcb67e4ed55401617cd3a310880c0220fb347891c7f74a764f2968c4_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5f97f71d3c8654e6728203276d1e348cc3ab38c85ad1f8f971afb3882cc2509c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:8968223352116fe4e3c01301eaa399303746a2ca052c06e3680ddf6452a4326a_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:bdc0ee85eaf2ce54ff4933086306350dc52aa39eb3a3b5bbda52d0dab04441ad_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:1eef40bdfc3b353816016f9c2047313a16f566cd6be51cd613123147981317f0_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:4ef6cfdb1d3e85bd7579dc7874e03882b638de56fffd9eecd2cb33b854ee89c1_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:55c543a425b3c6d4253ed8da84186613942f1a2d4c6a92baebe7af4969232687_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:10156cf12af87b139f80acb9c08ac4e7b5b03552fa96c4ae9599d542481d1eb3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4bc826cd918ef240ef3d295f7d9c4b3eb853a9df476397b861417a1a217cd0d2_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:fd278c9564c15739424f80677c46983e453922763165cb581e86bc822edcbb1e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:050c639907111c3b317159a5aa49e1a0fd4c967cc61b02aa3141629d31c803b0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:6a30771dad664d0a2d35a5596fcbaca37591397aadf85538dde84c9d80bf37c1_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:adb71cc21725b24648f22d3d458e26ff749cee8d1ce9ecbff3c75f8a30fcd602_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2e46c6e7a3634b1203117fa2b74aa7bc4049f352d5cf2fbcd9cb8fd44e9d6408_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:9d174f69c1dbb2a5f728e40412adca0cb22c8c807b4a0fc9b6a45acfa9bc1b87_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7239dc7dd37fc8fd37d62bcbd8e2181a5d56daae0fd7417287c55b5b82c2ba0_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:719fd22a5a06fbbf42363ee4af91585d04b984657c51554c4f803a2d977d1d68_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:c7ba1f288436120dcd436a00a0d5359fc6848895be937ac0c768dd15467b136d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:f720e2dc90a9bff3f7ea5b270462c84466c2feb6830d26d15b41b09755c0f0d8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.