{"id":"ALSA-2026:18748","summary":"Moderate: libvirt security update","details":"Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  \n\nSecurity Fix(es):  \n\n  * libvirt: Denial of service in XML parsing (CVE-2025-12748)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","modified":"2026-05-26T16:00:16.787747350Z","published":"2026-05-19T00:00:00Z","related":["CVE-2025-12748"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:18748"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-12748"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2413801"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-18748.html"}],"affected":[{"package":{"name":"libvirt","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-client","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-client-qemu","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-client-qemu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-common","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-config-network","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-config-network"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-config-nwfilter","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-config-nwfilter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-interface","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-interface"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-network","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-network"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-nodedev","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-nodedev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-nwfilter","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-nwfilter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-qemu","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-qemu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-secret","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-secret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage-core","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage-disk","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-disk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage-iscsi","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-iscsi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage-logical","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-logical"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage-mpath","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-mpath"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage-rbd","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-rbd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-driver-storage-scsi","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-scsi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-kvm","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-kvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-lock","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-lock"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-log","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-log"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-plugin-lockd","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-plugin-lockd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-plugin-sanlock","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-plugin-sanlock"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-daemon-proxy","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-docs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-libs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-nss","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-nss"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}},{"package":{"name":"libvirt-ssh-proxy","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-ssh-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:18748.json"}}],"schema_version":"1.7.5"}