https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:34:22.369251+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24708 UBUNTU-CVE-2026-24708 2026-10-08T05:34:22.371204+00:00

Affected: Ubuntu:Pro:16.04:LTS: nova, Ubuntu:Pro:18.04:LTS: nova, Ubuntu:Pro:20.04:LTS: nova, Ubuntu:22.04:LTS: nova, Ubuntu:24.04:LTS: nova, Ubuntu:25.10: nova

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.