{"id":"USN-8831-1","summary":"libvirt vulnerabilities","details":"It was discovered that libvirt had an integer overflow vulnerability in\nthe NodeGetFreePages RPC handler. A local attacker could possibly use\nthis issue to cause a denial of service or execute arbitrary code.\n(CVE-2026-18917)\n\nIt was discovered that libvirt did not correctly handle symbolic links\nwhen changing ownership of the TPM emulator log file. A local attacker\nwith access to the swtpm account could possibly use this issue to cause libvirt\nto change the ownership of an arbitrary file. (CVE-2026-77159)","modified":"2026-09-28T17:42:45.899439778Z","published":"2026-09-28T11:48:10Z","related":["UBUNTU-CVE-2026-18917","UBUNTU-CVE-2026-77159"],"upstream":["CVE-2026-18917","CVE-2026-77159","UBUNTU-CVE-2026-18917","UBUNTU-CVE-2026-77159"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8831-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-18917"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-77159"}],"affected":[{"package":{"name":"libvirt","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1ubuntu7.21"}]}],"versions":["7.6.0-0ubuntu1","7.6.0-0ubuntu3","8.0.0-1ubuntu3","8.0.0-1ubuntu4","8.0.0-1ubuntu5","8.0.0-1ubuntu6","8.0.0-1ubuntu7","8.0.0-1ubuntu7.1","8.0.0-1ubuntu7.2","8.0.0-1ubuntu7.3","8.0.0-1ubuntu7.4","8.0.0-1ubuntu7.5","8.0.0-1ubuntu7.6","8.0.0-1ubuntu7.7","8.0.0-1ubuntu7.8","8.0.0-1ubuntu7.9","8.0.0-1ubuntu7.10","8.0.0-1ubuntu7.11","8.0.0-1ubuntu7.12","8.0.0-1ubuntu7.13","8.0.0-1ubuntu7.14","8.0.0-1ubuntu7.15","8.0.0-1ubuntu7.16","8.0.0-1ubuntu7.17","8.0.0-1ubuntu7.18","8.0.0-1ubuntu7.19","8.0.0-1ubuntu7.20"],"ecosystem_specific":{"binaries":[{"binary_name":"libnss-libvirt","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-clients","binary_version":"8.0.0-1ubuntu7.21"},{"binary_version":"8.0.0-1ubuntu7.21","binary_name":"libvirt-daemon"},{"binary_version":"8.0.0-1ubuntu7.21","binary_name":"libvirt-daemon-config-network"},{"binary_version":"8.0.0-1ubuntu7.21","binary_name":"libvirt-daemon-config-nwfilter"},{"binary_name":"libvirt-daemon-driver-lxc","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-daemon-driver-qemu","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-daemon-driver-storage-gluster","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-daemon-driver-storage-iscsi-direct","binary_version":"8.0.0-1ubuntu7.21"},{"binary_version":"8.0.0-1ubuntu7.21","binary_name":"libvirt-daemon-driver-storage-rbd"},{"binary_version":"8.0.0-1ubuntu7.21","binary_name":"libvirt-daemon-driver-storage-zfs"},{"binary_version":"8.0.0-1ubuntu7.21","binary_name":"libvirt-daemon-driver-vbox"},{"binary_name":"libvirt-daemon-driver-xen","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-daemon-system","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-daemon-system-systemd","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-daemon-system-sysv","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-login-shell","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-sanlock","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt-wireshark","binary_version":"8.0.0-1ubuntu7.21"},{"binary_name":"libvirt0","binary_version":"8.0.0-1ubuntu7.21"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[{"id":"CVE-2026-18917","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-77159","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8831-1.json"}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-2ubuntu8.19"}]}],"versions":["9.6.0-1ubuntu1","9.6.0-1ubuntu2","10.0.0-1ubuntu1","10.0.0-2ubuntu1","10.0.0-2ubuntu5","10.0.0-2ubuntu7","10.0.0-2ubuntu8","10.0.0-2ubuntu8.1","10.0.0-2ubuntu8.2","10.0.0-2ubuntu8.3","10.0.0-2ubuntu8.4","10.0.0-2ubuntu8.5","10.0.0-2ubuntu8.6","10.0.0-2ubuntu8.7","10.0.0-2ubuntu8.8","10.0.0-2ubuntu8.9","10.0.0-2ubuntu8.10","10.0.0-2ubuntu8.11","10.0.0-2ubuntu8.12","10.0.0-2ubuntu8.13","10.0.0-2ubuntu8.14","10.0.0-2ubuntu8.15","10.0.0-2ubuntu8.16","10.0.0-2ubuntu8.17"],"ecosystem_specific":{"binaries":[{"binary_name":"libnss-libvirt","binary_version":"10.0.0-2ubuntu8.19"},{"binary_name":"libvirt-clients","binary_version":"10.0.0-2ubuntu8.19"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-clients-qemu"},{"binary_name":"libvirt-daemon","binary_version":"10.0.0-2ubuntu8.19"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-daemon-config-network"},{"binary_name":"libvirt-daemon-config-nwfilter","binary_version":"10.0.0-2ubuntu8.19"},{"binary_name":"libvirt-daemon-driver-lxc","binary_version":"10.0.0-2ubuntu8.19"},{"binary_name":"libvirt-daemon-driver-qemu","binary_version":"10.0.0-2ubuntu8.19"},{"binary_name":"libvirt-daemon-driver-storage-gluster","binary_version":"10.0.0-2ubuntu8.19"},{"binary_name":"libvirt-daemon-driver-storage-iscsi-direct","binary_version":"10.0.0-2ubuntu8.19"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-daemon-driver-storage-rbd"},{"binary_name":"libvirt-daemon-driver-storage-zfs","binary_version":"10.0.0-2ubuntu8.19"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-daemon-driver-vbox"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-daemon-driver-xen"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-daemon-system"},{"binary_name":"libvirt-daemon-system-systemd","binary_version":"10.0.0-2ubuntu8.19"},{"binary_name":"libvirt-daemon-system-sysv","binary_version":"10.0.0-2ubuntu8.19"},{"binary_name":"libvirt-l10n","binary_version":"10.0.0-2ubuntu8.19"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-login-shell"},{"binary_name":"libvirt-sanlock","binary_version":"10.0.0-2ubuntu8.19"},{"binary_version":"10.0.0-2ubuntu8.19","binary_name":"libvirt-wireshark"},{"binary_name":"libvirt0","binary_version":"10.0.0-2ubuntu8.19"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:24.04:LTS","cves":[{"id":"CVE-2026-18917","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-77159","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8831-1.json"}},{"package":{"name":"libvirt","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/libvirt?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-1ubuntu5.5"}]}],"versions":["11.6.0-1ubuntu3","11.6.0-1ubuntu5","11.6.0-1ubuntu6","11.6.0-1ubuntu7","11.6.0-1ubuntu8","12.0.0-1ubuntu3","12.0.0-1ubuntu5","12.0.0-1ubuntu5.1","12.0.0-1ubuntu5.2","12.0.0-1ubuntu5.3","12.0.0-1ubuntu5.4"],"ecosystem_specific":{"binaries":[{"binary_name":"libnss-libvirt","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-clients","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-clients-qemu","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-common"},{"binary_name":"libvirt-daemon","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-daemon-common","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-config-network"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-config-nwfilter"},{"binary_name":"libvirt-daemon-driver-interface","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-lxc"},{"binary_name":"libvirt-daemon-driver-network","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-nodedev"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-nwfilter"},{"binary_name":"libvirt-daemon-driver-qemu","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-secret"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-storage"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-storage-disk"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-storage-gluster"},{"binary_name":"libvirt-daemon-driver-storage-iscsi","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-daemon-driver-storage-iscsi-direct","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-daemon-driver-storage-logical","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-storage-mpath"},{"binary_name":"libvirt-daemon-driver-storage-rbd","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-driver-storage-scsi"},{"binary_name":"libvirt-daemon-driver-storage-zfs","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-daemon-driver-vbox","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-daemon-driver-xen","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-lock"},{"binary_name":"libvirt-daemon-log","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-plugin-lockd"},{"binary_name":"libvirt-daemon-plugin-sanlock","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-daemon-system","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-daemon-system-systemd","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-daemon-system-sysv"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt-l10n"},{"binary_name":"libvirt-login-shell","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-sanlock","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-ssh-proxy","binary_version":"12.0.0-1ubuntu5.5"},{"binary_name":"libvirt-wireshark","binary_version":"12.0.0-1ubuntu5.5"},{"binary_version":"12.0.0-1ubuntu5.5","binary_name":"libvirt0"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-18917"},{"id":"CVE-2026-77159","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:26.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8831-1.json"}}],"schema_version":"1.9.0"}