{"id":"USN-8652-1","summary":"libvirt vulnerabilities","details":"It was discovered that libvirt incorrectly handled guest reboots in the\nlibxl driver. An attacker in a guest could possibly use this issue to\ncause the libvirt daemon to crash, resulting in a denial of service. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2021-4147)\n\nAlexander Kuznetsov discovered that libvirt incorrectly handled listing\nnetwork interfaces. An attacker could possibly use this issue to cause\nthe libvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-1441)\n\nIt was discovered that libvirt incorrectly handled certain values in its\nRPC library. An attacker could possibly use this issue to cause the\nlibvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-2494)\n\nIt was discovered that libvirt incorrectly handled listing network\ninterfaces under certain circumstances. An attacker could possibly use\nthis issue to cause the libvirt daemon to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2024-2496)\n\nIt was discovered that libvirt incorrectly set permissions on external\ninactive snapshots, making them world-readable. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu\n20.04 LTS. (CVE-2025-13193)\n\nIt was discovered that libvirt incorrectly handled certain characters in\nvirtual network definitions. An authenticated user could possibly use\nthis issue to inject arbitrary configuration directives and execute\narbitrary code as root. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2026-61477)\n\nIt was discovered that libvirt incorrectly handled certain XML input. An\nattacker could possibly use this issue to cause the libvirt daemon to\ncrash, resulting in a denial of service. (CVE-2026-61478)\n\nHe Wei discovered that libvirt incorrectly followed symbolic links when\nchanging file ownership. A local attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63622)\n\nIt was discovered that libvirt incorrectly set permissions on images\nduring storage volume clone and convert operations, making them\ntemporarily world-readable. A local attacker could possibly use this\nissue to obtain sensitive information. (CVE-2026-63623)","modified":"2026-08-20T05:29:53.581987608Z","published":"2026-08-19T16:56:44Z","related":["UBUNTU-CVE-2021-4147","UBUNTU-CVE-2024-1441","UBUNTU-CVE-2024-2494","UBUNTU-CVE-2024-2496","UBUNTU-CVE-2025-13193","UBUNTU-CVE-2026-61477","UBUNTU-CVE-2026-61478","UBUNTU-CVE-2026-63622","UBUNTU-CVE-2026-63623"],"upstream":["CVE-2021-4147","CVE-2024-1441","CVE-2024-2494","CVE-2024-2496","CVE-2025-13193","CVE-2026-61477","CVE-2026-61478","CVE-2026-63622","CVE-2026-63623","UBUNTU-CVE-2021-4147","UBUNTU-CVE-2024-1441","UBUNTU-CVE-2024-2494","UBUNTU-CVE-2024-2496","UBUNTU-CVE-2025-13193","UBUNTU-CVE-2026-61477","UBUNTU-CVE-2026-61478","UBUNTU-CVE-2026-63622","UBUNTU-CVE-2026-63623"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8652-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-4147"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-1441"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-2494"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-2496"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-13193"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-61477"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-61478"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-63622"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-63623"}],"affected":[{"package":{"name":"libvirt","ecosystem":"Ubuntu:Pro:14.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=esm-infra-legacy%2Ftrusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.28+esm2"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25","1.2.2-0ubuntu13.1.26","1.2.2-0ubuntu13.1.27","1.2.2-0ubuntu13.1.28","1.2.2-0ubuntu13.1.28+esm1"],"ecosystem_specific":{"binaries":[{"binary_name":"libvirt-bin","binary_version":"1.2.2-0ubuntu13.1.28+esm2"},{"binary_name":"libvirt0","binary_version":"1.2.2-0ubuntu13.1.28+esm2"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8652-1.json","cves_map":{"ecosystem":"Ubuntu:Pro:14.04:LTS","cves":[{"id":"CVE-2024-1441","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2024-2494"},{"id":"CVE-2024-2496","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2025-13193","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-61478"},{"id":"CVE-2026-63623","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}]}}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=esm-infra-legacy%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.31+esm1"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24","1.3.1-1ubuntu10.25","1.3.1-1ubuntu10.26","1.3.1-1ubuntu10.27","1.3.1-1ubuntu10.29","1.3.1-1ubuntu10.30","1.3.1-1ubuntu10.31"],"ecosystem_specific":{"binaries":[{"binary_version":"1.3.1-1ubuntu10.31+esm1","binary_name":"libvirt-bin"},{"binary_name":"libvirt0","binary_version":"1.3.1-1ubuntu10.31+esm1"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:16.04:LTS","cves":[{"id":"CVE-2021-4147","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"},{"score":"low","type":"Ubuntu"}]},{"id":"CVE-2024-1441","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-2494","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-2496","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2025-13193","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-61477","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-61478","severity":[{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-63623"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8652-1.json"}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.21+esm1"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7","4.0.0-1ubuntu8.8","4.0.0-1ubuntu8.9","4.0.0-1ubuntu8.10","4.0.0-1ubuntu8.11","4.0.0-1ubuntu8.12","4.0.0-1ubuntu8.13","4.0.0-1ubuntu8.14","4.0.0-1ubuntu8.15","4.0.0-1ubuntu8.16","4.0.0-1ubuntu8.17","4.0.0-1ubuntu8.19","4.0.0-1ubuntu8.20","4.0.0-1ubuntu8.21"],"ecosystem_specific":{"binaries":[{"binary_name":"libnss-libvirt","binary_version":"4.0.0-1ubuntu8.21+esm1"},{"binary_version":"4.0.0-1ubuntu8.21+esm1","binary_name":"libvirt-bin"},{"binary_version":"4.0.0-1ubuntu8.21+esm1","binary_name":"libvirt-clients"},{"binary_version":"4.0.0-1ubuntu8.21+esm1","binary_name":"libvirt-daemon"},{"binary_name":"libvirt-daemon-driver-storage-gluster","binary_version":"4.0.0-1ubuntu8.21+esm1"},{"binary_version":"4.0.0-1ubuntu8.21+esm1","binary_name":"libvirt-daemon-driver-storage-rbd"},{"binary_name":"libvirt-daemon-driver-storage-sheepdog","binary_version":"4.0.0-1ubuntu8.21+esm1"},{"binary_name":"libvirt-daemon-driver-storage-zfs","binary_version":"4.0.0-1ubuntu8.21+esm1"},{"binary_name":"libvirt-daemon-system","binary_version":"4.0.0-1ubuntu8.21+esm1"},{"binary_version":"4.0.0-1ubuntu8.21+esm1","binary_name":"libvirt-sanlock"},{"binary_name":"libvirt-wireshark","binary_version":"4.0.0-1ubuntu8.21+esm1"},{"binary_version":"4.0.0-1ubuntu8.21+esm1","binary_name":"libvirt0"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[{"id":"CVE-2024-1441","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2024-2494"},{"id":"CVE-2024-2496","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2025-13193"},{"id":"CVE-2026-61477","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-61478","severity":[{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-63623","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8652-1.json"}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=esm-infra%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-0ubuntu8.20+esm1"}]}],"versions":["5.4.0-0ubuntu5","6.0.0-0ubuntu1","6.0.0-0ubuntu2","6.0.0-0ubuntu3","6.0.0-0ubuntu4","6.0.0-0ubuntu5","6.0.0-0ubuntu6","6.0.0-0ubuntu7","6.0.0-0ubuntu8","6.0.0-0ubuntu8.1","6.0.0-0ubuntu8.2","6.0.0-0ubuntu8.3","6.0.0-0ubuntu8.4","6.0.0-0ubuntu8.5","6.0.0-0ubuntu8.7","6.0.0-0ubuntu8.8","6.0.0-0ubuntu8.9","6.0.0-0ubuntu8.10","6.0.0-0ubuntu8.11","6.0.0-0ubuntu8.12","6.0.0-0ubuntu8.13","6.0.0-0ubuntu8.14","6.0.0-0ubuntu8.15","6.0.0-0ubuntu8.16","6.0.0-0ubuntu8.19","6.0.0-0ubuntu8.20"],"ecosystem_specific":{"binaries":[{"binary_name":"libnss-libvirt","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_name":"libvirt-clients","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_version":"6.0.0-0ubuntu8.20+esm1","binary_name":"libvirt-daemon"},{"binary_name":"libvirt-daemon-driver-lxc","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_name":"libvirt-daemon-driver-qemu","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_name":"libvirt-daemon-driver-storage-gluster","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_name":"libvirt-daemon-driver-storage-rbd","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_version":"6.0.0-0ubuntu8.20+esm1","binary_name":"libvirt-daemon-driver-storage-zfs"},{"binary_name":"libvirt-daemon-driver-vbox","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_name":"libvirt-daemon-driver-xen","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_version":"6.0.0-0ubuntu8.20+esm1","binary_name":"libvirt-daemon-system"},{"binary_name":"libvirt-daemon-system-systemd","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_name":"libvirt-daemon-system-sysv","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_name":"libvirt-sanlock","binary_version":"6.0.0-0ubuntu8.20+esm1"},{"binary_version":"6.0.0-0ubuntu8.20+esm1","binary_name":"libvirt-wireshark"},{"binary_name":"libvirt0","binary_version":"6.0.0-0ubuntu8.20+esm1"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:20.04:LTS","cves":[{"id":"CVE-2025-13193","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-61477","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-61478","severity":[{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-63622","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-63623","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8652-1.json"}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1ubuntu7.19"}]}],"versions":["7.6.0-0ubuntu1","7.6.0-0ubuntu3","8.0.0-1ubuntu3","8.0.0-1ubuntu4","8.0.0-1ubuntu5","8.0.0-1ubuntu6","8.0.0-1ubuntu7","8.0.0-1ubuntu7.1","8.0.0-1ubuntu7.2","8.0.0-1ubuntu7.3","8.0.0-1ubuntu7.4","8.0.0-1ubuntu7.5","8.0.0-1ubuntu7.6","8.0.0-1ubuntu7.7","8.0.0-1ubuntu7.8","8.0.0-1ubuntu7.9","8.0.0-1ubuntu7.10","8.0.0-1ubuntu7.11","8.0.0-1ubuntu7.12","8.0.0-1ubuntu7.13","8.0.0-1ubuntu7.14","8.0.0-1ubuntu7.15","8.0.0-1ubuntu7.16","8.0.0-1ubuntu7.17","8.0.0-1ubuntu7.18"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libnss-libvirt"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-clients"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-daemon"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-daemon-config-network"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-daemon-config-nwfilter"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-daemon-driver-lxc"},{"binary_name":"libvirt-daemon-driver-qemu","binary_version":"8.0.0-1ubuntu7.19"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-daemon-driver-storage-gluster"},{"binary_name":"libvirt-daemon-driver-storage-iscsi-direct","binary_version":"8.0.0-1ubuntu7.19"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-daemon-driver-storage-rbd"},{"binary_name":"libvirt-daemon-driver-storage-zfs","binary_version":"8.0.0-1ubuntu7.19"},{"binary_name":"libvirt-daemon-driver-vbox","binary_version":"8.0.0-1ubuntu7.19"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-daemon-driver-xen"},{"binary_name":"libvirt-daemon-system","binary_version":"8.0.0-1ubuntu7.19"},{"binary_name":"libvirt-daemon-system-systemd","binary_version":"8.0.0-1ubuntu7.19"},{"binary_name":"libvirt-daemon-system-sysv","binary_version":"8.0.0-1ubuntu7.19"},{"binary_version":"8.0.0-1ubuntu7.19","binary_name":"libvirt-login-shell"},{"binary_name":"libvirt-sanlock","binary_version":"8.0.0-1ubuntu7.19"},{"binary_name":"libvirt-wireshark","binary_version":"8.0.0-1ubuntu7.19"},{"binary_name":"libvirt0","binary_version":"8.0.0-1ubuntu7.19"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8652-1.json","cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-61477"},{"id":"CVE-2026-61478","severity":[{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-63622","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-63623","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}]}}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-2ubuntu8.16"}]}],"versions":["9.6.0-1ubuntu1","9.6.0-1ubuntu2","10.0.0-1ubuntu1","10.0.0-2ubuntu1","10.0.0-2ubuntu5","10.0.0-2ubuntu7","10.0.0-2ubuntu8","10.0.0-2ubuntu8.1","10.0.0-2ubuntu8.2","10.0.0-2ubuntu8.3","10.0.0-2ubuntu8.4","10.0.0-2ubuntu8.5","10.0.0-2ubuntu8.6","10.0.0-2ubuntu8.7","10.0.0-2ubuntu8.8","10.0.0-2ubuntu8.9","10.0.0-2ubuntu8.10","10.0.0-2ubuntu8.11","10.0.0-2ubuntu8.12","10.0.0-2ubuntu8.13","10.0.0-2ubuntu8.14","10.0.0-2ubuntu8.15"],"ecosystem_specific":{"binaries":[{"binary_name":"libnss-libvirt","binary_version":"10.0.0-2ubuntu8.16"},{"binary_name":"libvirt-clients","binary_version":"10.0.0-2ubuntu8.16"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-clients-qemu"},{"binary_name":"libvirt-daemon","binary_version":"10.0.0-2ubuntu8.16"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-daemon-config-network"},{"binary_name":"libvirt-daemon-config-nwfilter","binary_version":"10.0.0-2ubuntu8.16"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-daemon-driver-lxc"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-daemon-driver-qemu"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-daemon-driver-storage-gluster"},{"binary_name":"libvirt-daemon-driver-storage-iscsi-direct","binary_version":"10.0.0-2ubuntu8.16"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-daemon-driver-storage-rbd"},{"binary_name":"libvirt-daemon-driver-storage-zfs","binary_version":"10.0.0-2ubuntu8.16"},{"binary_name":"libvirt-daemon-driver-vbox","binary_version":"10.0.0-2ubuntu8.16"},{"binary_name":"libvirt-daemon-driver-xen","binary_version":"10.0.0-2ubuntu8.16"},{"binary_name":"libvirt-daemon-system","binary_version":"10.0.0-2ubuntu8.16"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-daemon-system-systemd"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-daemon-system-sysv"},{"binary_name":"libvirt-l10n","binary_version":"10.0.0-2ubuntu8.16"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-login-shell"},{"binary_name":"libvirt-sanlock","binary_version":"10.0.0-2ubuntu8.16"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt-wireshark"},{"binary_version":"10.0.0-2ubuntu8.16","binary_name":"libvirt0"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8652-1.json","cves_map":{"ecosystem":"Ubuntu:24.04:LTS","cves":[{"id":"CVE-2026-61477","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-61478","severity":[{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-63622"},{"id":"CVE-2026-63623","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]}]}}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-1ubuntu5.3"}]}],"versions":["11.6.0-1ubuntu3","11.6.0-1ubuntu5","11.6.0-1ubuntu6","11.6.0-1ubuntu7","11.6.0-1ubuntu8","12.0.0-1ubuntu3","12.0.0-1ubuntu5","12.0.0-1ubuntu5.1","12.0.0-1ubuntu5.2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libnss-libvirt","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-clients","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-clients-qemu"},{"binary_name":"libvirt-common","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-common"},{"binary_name":"libvirt-daemon-config-network","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-config-nwfilter","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-interface"},{"binary_name":"libvirt-daemon-driver-lxc","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-network"},{"binary_name":"libvirt-daemon-driver-nodedev","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-driver-nwfilter","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-driver-qemu","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-secret"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-storage"},{"binary_name":"libvirt-daemon-driver-storage-disk","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-driver-storage-gluster","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-storage-iscsi"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-storage-iscsi-direct"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-storage-logical"},{"binary_name":"libvirt-daemon-driver-storage-mpath","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-driver-storage-rbd","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-driver-storage-scsi"},{"binary_name":"libvirt-daemon-driver-storage-zfs","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-driver-vbox","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-driver-xen","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-lock"},{"binary_name":"libvirt-daemon-log","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-plugin-lockd"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-daemon-plugin-sanlock"},{"binary_name":"libvirt-daemon-system","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-system-systemd","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-daemon-system-sysv","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-l10n","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-login-shell","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-sanlock","binary_version":"12.0.0-1ubuntu5.3"},{"binary_name":"libvirt-ssh-proxy","binary_version":"12.0.0-1ubuntu5.3"},{"binary_version":"12.0.0-1ubuntu5.3","binary_name":"libvirt-wireshark"},{"binary_name":"libvirt0","binary_version":"12.0.0-1ubuntu5.3"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:26.04:LTS","cves":[{"id":"CVE-2026-61477","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-61478"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-63622"},{"id":"CVE-2026-63623","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8652-1.json"}}],"schema_version":"1.9.0"}