Most recent entries from all

EUVD-2026-260469

fkie_cve-2025-64435

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod associated with the VMI. This can mislead the virt-controller into associating the fake pod with the VMI, resulting in incorrect status updates and potentially causing a DoS (Denial-of-Service). This vulnerability is fixed in 1.7.0-beta.0.

GHSA-9m94-w2vq-hcf9 — KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

Affected: Go: kubevirt.io/kubevirt

### Summary _Short summary of the problem. Make the impact and severity as clear as possible.

A logic flaw in the `virt-controller` allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate `virt-launcher` pod associated with the VMI. This can mislead the `virt-controller` into associating the fake pod with the VMI, resulting in incorrect status updates and potentially causing a DoS (Denial-of-Service).

### Details _Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._

A vulnerability has been identified in the logic responsible for reconciling the state of VMI. Specifically, it is possible to associate a malicious attacker-controlled pod with an existing VMI running within the same namespace as the pod, thereby replacing the legitimate `virt-launcher` pod associated with the VMI.

The `virt-launcher` pod is critical for enforcing the isolation mechanisms applied to the QEMU process that runs the virtual machine. It also serves, along with `virt-handler`, as a management interface that allows cluster users, operators, or administrators to control the lifecycle of the VMI (e.g., starting, stopping, or migrating it).

When `virt-controller` receives a notification about a change in a VMI's state, it attempts to identify the corresponding `virt-launcher` pod. This is necessary in several scenarios, including:

- When hardware devices are requested to be…

msrc_CVE-2025-64435 — KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

msrc_CVE-2025-64435

openSUSE-SU-2026:20281-1 — Security update for kubevirt

Security update for kubevirt

SUSE-SU-2026:20551-1 — Security update for kubevirt

Security update for kubevirt

WID-SEC-W-2025-2563 — Microsoft Azure Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure Linux und Microsoft Windows ausnutzen um erhöhte Privilegien zu erlangen, beliebigen Code auszuführen, die Authentifizierung zu umgehen, Spoofing-Angriffe durchzuführen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.