Security update for kubevirt
Security update for kubevirt
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-64324US | high7.7 | — | ||
KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or directory owned by the user with UID 107 into a VM… | ||||
| CVE-2025-64437US | — | — | ||
KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler does not verify whether the launcher-sock is a symlink or a reg… | ||||
| CVE-2025-64435US | — | — | ||
KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running… | ||||
| CVE-2025-64434US | medium6.3 | — | ||
KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler (via verifyPeerCert), an attacker who c… | ||||
| CVE-2025-64433US | — | — | ||
KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-laun… | ||||
| CVE-2025-64432US | medium4.7 | — | ||
KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authenti… | ||||
| CVE-2025-22872US | — | — | ||
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in su… | ||||
| CVE-2024-45310US | low3.6 | — | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating e… | ||||
references
External citations — patches, advisories, analysis.
- SUSE Bug 1241772self
- SUSE Bug 1253181self
- SUSE Bug 1253185self
- SUSE Bug 1253186self
- SUSE Bug 1253189self
- SUSE Bug 1253194self
- SUSE Bug 1253748self
- SUSE Bug 1257128self
remediations (32)
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedkubevirt-virtctl-0:1.7.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan