https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:22:50.126517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:8003 ALSA-2022:8003 — Low: libvirt security, bug fix, and enhancement update 2026-10-04T17:22:50.377957+00:00

Affected: AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev, AlmaLinux:9: libvirt-daemon-driver-nwfilter, AlmaLinux:9: libvirt-daemon-driver-qemu and 15 more

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (8.5.0). (BZ#2060313)

Security Fix(es):

* libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05846 bdu:2022-05846 2026-10-04T17:22:50.378053+00:00 bdu:2022-05846 https://cve.radiocsirt.org/vuln/essa-2022:0193 ESSA-2022:0193 — security update for 2026-10-04T17:22:50.378071+00:00

security update for

 https://cve.radiocsirt.org/vuln/euvd-2026-11328 EUVD-2026-11328 2026-10-04T17:22:50.378092+00:00 EUVD-2026-11328 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0897 fkie_cve-2022-0897 2026-10-04T17:22:50.378104+00:00

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).

 https://cve.radiocsirt.org/vuln/ghsa-4r2g-j5rc-7wqf GHSA-4r2g-j5rc-7wqf 2026-10-04T17:22:50.378129+00:00

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the `driver->nwfilters` mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the `driver->nwfilters` object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt’s API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).

 https://cve.radiocsirt.org/vuln/gsd-2022-0897 gsd-2022-0897 2026-10-04T17:22:50.378149+00:00 gsd-2022-0897 https://cve.radiocsirt.org/vuln/oesa-2022-1722 OESA-2022-1722 — libvirt security update 2026-10-04T17:22:50.378160+00:00

Affected: openEuler:20.03-LTS-SP1: libvirt, openEuler:20.03-LTS-SP3: libvirt, openEuler:22.03-LTS: libvirt

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es): A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the `driver->nwfilters` mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the `driver->nwfilters` object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt’s API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).(CVE-2022-0897)

 https://cve.radiocsirt.org/vuln/rhsa-2022:7472 RHSA-2022:7472 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update 2026-10-04T17:22:50.378191+00:00

QEMU: fdc: heap buffer overflow in DMA read data transfers libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service libguestfs: Buffer overflow in get_keys leads to DoS swtpm: Unchecked header size indicator against expected size

 https://cve.radiocsirt.org/vuln/suse-su-2022:1540-1 SUSE-SU-2022:1540-1 — Security update for libvirt 2026-10-04T17:22:50.378214+00:00

Security update for libvirt

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0897 UBUNTU-CVE-2022-0897 2026-10-04T17:22:50.378229+00:00

Affected: Ubuntu:18.04:LTS: libvirt, Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0118 WID-SEC-W-2022-0118 — libvirt: Schwachstelle ermöglicht Denial of Service 2026-10-04T17:22:50.378254+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.