{"id":"ALSA-2026:74424","summary":"Important: libvirt security, bug fix, and enhancement update","details":"The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.  \n\nSecurity Fix(es):  \n\n  * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)\n  * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (CVE-2026-18917)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to virtio-vga on target [almalinux-9.8.z] (JIRA:AlmaLinux-186018)\n  * libvirt-guests does not work together with virtlockd on shutdown [almalinux-9.8.z] (JIRA:AlmaLinux-224986)\n  * Expose guest-get-devices in libvirt-api [almalinux-9.8.z] (JIRA:AlmaLinux-243306)\n  * allow hyperv pvpanic \"device\" to process Windows crash dump [almalinux-9.8.z] (JIRA:AlmaLinux-242549)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-10-05T13:11:48.280056748Z","published":"2026-10-01T00:00:00Z","related":["CVE-2026-18917","CVE-2026-63622"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74424"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-18917"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-63622"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2513065"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2520161"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-74424.html"}],"affected":[{"package":{"name":"libvirt","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-client","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-client-qemu","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-client-qemu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-common","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-config-network","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-config-network"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-config-nwfilter","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-config-nwfilter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-interface","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-interface"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-network","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-network"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-nodedev","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-nodedev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-nwfilter","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-nwfilter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-qemu","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-qemu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-secret","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-secret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage-core","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage-disk","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-disk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage-iscsi","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-iscsi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage-logical","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-logical"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage-mpath","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-mpath"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage-rbd","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-rbd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-driver-storage-scsi","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-driver-storage-scsi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-kvm","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-kvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-lock","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-lock"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-log","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-log"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-plugin-lockd","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-plugin-lockd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-plugin-sanlock","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-plugin-sanlock"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-daemon-proxy","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-daemon-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-docs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-libs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-nss","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-nss"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}},{"package":{"name":"libvirt-ssh-proxy","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/libvirt-ssh-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-12.7.el9_8.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:74424.json"}}],"schema_version":"1.9.0"}