{"id":"CVE-2026-61478","aliases":["BELL-CVE-2026-61478","DEBIAN-CVE-2026-61478","UBUNTU-CVE-2026-61478","USN-8652-1","USN-8833-1"],"status":"published","title":"libvirt vulnerabilities","description":"[Unknown description]","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-08-08T10:47:34.638866378Z","modified":"2026-09-28T17:42:51Z","fixes":[{"ecosystem":"Alpaquita:stream","package":"libvirt","fixed_in":["12.6.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["11.3.0-3+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["12.6.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvirt","fixed_in":["1.2.2-0ubuntu13.1.28+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvirt","fixed_in":["1.3.1-1ubuntu10.31+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libvirt","fixed_in":["4.0.0-1ubuntu8.21+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libvirt","fixed_in":["6.0.0-0ubuntu8.20+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libvirt","fixed_in":["8.0.0-1ubuntu7.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libvirt","fixed_in":["10.0.0-2ubuntu8.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libvirt","fixed_in":["12.0.0-1ubuntu5.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libvirt-hwe","fixed_in":["12.0.0-1ubuntu5.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.9.0-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.0-r2"},{"fixed":"12.6.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0.0-1","10.0.0-2","10.0.0-3","10.1.0-1","10.10.0-1","10.10.0-2","10.10.0-3","10.10.0-4","10.2.0-1","10.3.0-1","10.3.0-2","10.3.0-3","10.4.0-1","10.5.0-1","10.6.0-1","10.6.0-2","10.6.0-3","10.7.0-1","10.7.0-2","10.7.0-3","10.8.0-1","10.9.0-1","10.9.0-2","11.0.0-1","11.0.0-2","11.1.0-1","11.1.0-2","11.10.0-1","11.10.0-2","11.2.0-1","11.2.0-2","11.2.0-3","11.3.0-1","11.3.0-2","11.3.0-2~bpo12+1","11.3.0-3","11.4.0-1","11.5.0-1","11.6.0-1","11.7.0-1","11.8.0-1","11.8.0-2","11.9.0-1","11.9.0-2","12.0.0-1","12.1.0-1","12.2.0-1","12.3.0-1","12.4.0-1","12.5.0-1","12.6.0-1","12.7.0-1","9.0.0-4","9.0.0-4+deb12u1","9.0.0-4+deb12u2","9.1.0-1","9.10.0-1","9.2.0-1","9.2.0-2","9.3.0-1","9.3.0-2","9.4.0-1","9.5.0-1","9.5.0-2","9.6.0-1","9.6.0-2","9.6.0-3","9.7.0-1","9.8.0-1","9.8.0-2","9.9.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-3+deb13u3"}]}],"versions":["11.3.0-3","11.3.0-3+deb13u1","11.3.0-3+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6.0-1"}]}],"versions":["11.10.0-1","11.10.0-2","11.3.0-3","11.4.0-1","11.5.0-1","11.6.0-1","11.7.0-1","11.8.0-1","11.8.0-2","11.9.0-1","11.9.0-2","12.0.0-1","12.1.0-1","12.2.0-1","12.3.0-1","12.4.0-1","12.5.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.28+esm2"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25","1.2.2-0ubuntu13.1.26","1.2.2-0ubuntu13.1.27","1.2.2-0ubuntu13.1.28","1.2.2-0ubuntu13.1.28+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.31+esm1"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24","1.3.1-1ubuntu10.25","1.3.1-1ubuntu10.26","1.3.1-1ubuntu10.27","1.3.1-1ubuntu10.29","1.3.1-1ubuntu10.30","1.3.1-1ubuntu10.31"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.21+esm1"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7","4.0.0-1ubuntu8.8","4.0.0-1ubuntu8.9","4.0.0-1ubuntu8.10","4.0.0-1ubuntu8.11","4.0.0-1ubuntu8.12","4.0.0-1ubuntu8.13","4.0.0-1ubuntu8.14","4.0.0-1ubuntu8.15","4.0.0-1ubuntu8.16","4.0.0-1ubuntu8.17","4.0.0-1ubuntu8.19","4.0.0-1ubuntu8.20","4.0.0-1ubuntu8.21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-0ubuntu8.20+esm1"}]}],"versions":["5.4.0-0ubuntu5","6.0.0-0ubuntu1","6.0.0-0ubuntu2","6.0.0-0ubuntu3","6.0.0-0ubuntu4","6.0.0-0ubuntu5","6.0.0-0ubuntu6","6.0.0-0ubuntu7","6.0.0-0ubuntu8","6.0.0-0ubuntu8.1","6.0.0-0ubuntu8.2","6.0.0-0ubuntu8.3","6.0.0-0ubuntu8.4","6.0.0-0ubuntu8.5","6.0.0-0ubuntu8.7","6.0.0-0ubuntu8.8","6.0.0-0ubuntu8.9","6.0.0-0ubuntu8.10","6.0.0-0ubuntu8.11","6.0.0-0ubuntu8.12","6.0.0-0ubuntu8.13","6.0.0-0ubuntu8.14","6.0.0-0ubuntu8.15","6.0.0-0ubuntu8.16","6.0.0-0ubuntu8.19","6.0.0-0ubuntu8.20"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1ubuntu7.19"}]}],"versions":["7.6.0-0ubuntu1","7.6.0-0ubuntu3","8.0.0-1ubuntu3","8.0.0-1ubuntu4","8.0.0-1ubuntu5","8.0.0-1ubuntu6","8.0.0-1ubuntu7","8.0.0-1ubuntu7.1","8.0.0-1ubuntu7.2","8.0.0-1ubuntu7.3","8.0.0-1ubuntu7.4","8.0.0-1ubuntu7.5","8.0.0-1ubuntu7.6","8.0.0-1ubuntu7.7","8.0.0-1ubuntu7.8","8.0.0-1ubuntu7.9","8.0.0-1ubuntu7.10","8.0.0-1ubuntu7.11","8.0.0-1ubuntu7.12","8.0.0-1ubuntu7.13","8.0.0-1ubuntu7.14","8.0.0-1ubuntu7.15","8.0.0-1ubuntu7.16","8.0.0-1ubuntu7.17","8.0.0-1ubuntu7.18"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-2ubuntu8.16"}]}],"versions":["9.6.0-1ubuntu1","9.6.0-1ubuntu2","10.0.0-1ubuntu1","10.0.0-2ubuntu1","10.0.0-2ubuntu5","10.0.0-2ubuntu7","10.0.0-2ubuntu8","10.0.0-2ubuntu8.1","10.0.0-2ubuntu8.2","10.0.0-2ubuntu8.3","10.0.0-2ubuntu8.4","10.0.0-2ubuntu8.5","10.0.0-2ubuntu8.6","10.0.0-2ubuntu8.7","10.0.0-2ubuntu8.8","10.0.0-2ubuntu8.9","10.0.0-2ubuntu8.10","10.0.0-2ubuntu8.11","10.0.0-2ubuntu8.12","10.0.0-2ubuntu8.13","10.0.0-2ubuntu8.14","10.0.0-2ubuntu8.15"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-1ubuntu5.3"}]}],"versions":["11.6.0-1ubuntu3","11.6.0-1ubuntu5","11.6.0-1ubuntu6","11.6.0-1ubuntu7","11.6.0-1ubuntu8","12.0.0-1ubuntu3","12.0.0-1ubuntu5","12.0.0-1ubuntu5.1","12.0.0-1ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libvirt-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-1ubuntu5.5"}]}],"versions":["12.0.0-1ubuntu5","12.0.0-1ubuntu5.1","12.0.0-1ubuntu5.2","12.0.0-1ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.28+esm2"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25","1.2.2-0ubuntu13.1.26","1.2.2-0ubuntu13.1.27","1.2.2-0ubuntu13.1.28","1.2.2-0ubuntu13.1.28+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.31+esm1"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24","1.3.1-1ubuntu10.25","1.3.1-1ubuntu10.26","1.3.1-1ubuntu10.27","1.3.1-1ubuntu10.29","1.3.1-1ubuntu10.30","1.3.1-1ubuntu10.31"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.21+esm1"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7","4.0.0-1ubuntu8.8","4.0.0-1ubuntu8.9","4.0.0-1ubuntu8.10","4.0.0-1ubuntu8.11","4.0.0-1ubuntu8.12","4.0.0-1ubuntu8.13","4.0.0-1ubuntu8.14","4.0.0-1ubuntu8.15","4.0.0-1ubuntu8.16","4.0.0-1ubuntu8.17","4.0.0-1ubuntu8.19","4.0.0-1ubuntu8.20","4.0.0-1ubuntu8.21"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-0ubuntu8.20+esm1"}]}],"versions":["5.4.0-0ubuntu5","6.0.0-0ubuntu1","6.0.0-0ubuntu2","6.0.0-0ubuntu3","6.0.0-0ubuntu4","6.0.0-0ubuntu5","6.0.0-0ubuntu6","6.0.0-0ubuntu7","6.0.0-0ubuntu8","6.0.0-0ubuntu8.1","6.0.0-0ubuntu8.2","6.0.0-0ubuntu8.3","6.0.0-0ubuntu8.4","6.0.0-0ubuntu8.5","6.0.0-0ubuntu8.7","6.0.0-0ubuntu8.8","6.0.0-0ubuntu8.9","6.0.0-0ubuntu8.10","6.0.0-0ubuntu8.11","6.0.0-0ubuntu8.12","6.0.0-0ubuntu8.13","6.0.0-0ubuntu8.14","6.0.0-0ubuntu8.15","6.0.0-0ubuntu8.16","6.0.0-0ubuntu8.19","6.0.0-0ubuntu8.20"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1ubuntu7.19"}]}],"versions":["7.6.0-0ubuntu1","7.6.0-0ubuntu3","8.0.0-1ubuntu3","8.0.0-1ubuntu4","8.0.0-1ubuntu5","8.0.0-1ubuntu6","8.0.0-1ubuntu7","8.0.0-1ubuntu7.1","8.0.0-1ubuntu7.2","8.0.0-1ubuntu7.3","8.0.0-1ubuntu7.4","8.0.0-1ubuntu7.5","8.0.0-1ubuntu7.6","8.0.0-1ubuntu7.7","8.0.0-1ubuntu7.8","8.0.0-1ubuntu7.9","8.0.0-1ubuntu7.10","8.0.0-1ubuntu7.11","8.0.0-1ubuntu7.12","8.0.0-1ubuntu7.13","8.0.0-1ubuntu7.14","8.0.0-1ubuntu7.15","8.0.0-1ubuntu7.16","8.0.0-1ubuntu7.17","8.0.0-1ubuntu7.18"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-2ubuntu8.16"}]}],"versions":["9.6.0-1ubuntu1","9.6.0-1ubuntu2","10.0.0-1ubuntu1","10.0.0-2ubuntu1","10.0.0-2ubuntu5","10.0.0-2ubuntu7","10.0.0-2ubuntu8","10.0.0-2ubuntu8.1","10.0.0-2ubuntu8.2","10.0.0-2ubuntu8.3","10.0.0-2ubuntu8.4","10.0.0-2ubuntu8.5","10.0.0-2ubuntu8.6","10.0.0-2ubuntu8.7","10.0.0-2ubuntu8.8","10.0.0-2ubuntu8.9","10.0.0-2ubuntu8.10","10.0.0-2ubuntu8.11","10.0.0-2ubuntu8.12","10.0.0-2ubuntu8.13","10.0.0-2ubuntu8.14","10.0.0-2ubuntu8.15"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-1ubuntu5.3"}]}],"versions":["11.6.0-1ubuntu3","11.6.0-1ubuntu5","11.6.0-1ubuntu6","11.6.0-1ubuntu7","11.6.0-1ubuntu8","12.0.0-1ubuntu3","12.0.0-1ubuntu5","12.0.0-1ubuntu5.1","12.0.0-1ubuntu5.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libvirt-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-1ubuntu5.5"}]}],"versions":["12.0.0-1ubuntu5","12.0.0-1ubuntu5.1","12.0.0-1ubuntu5.2","12.0.0-1ubuntu5.3"],"bundled":6}],"references":[{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-61478","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-61478","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-61478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61478","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8652-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8833-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-1441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-2494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-2496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-13193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-61477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-18917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-77159","tags":["report"]}],"sources":{"osv":[{"id":"BELL-CVE-2026-61478","status":"published","published":"2026-08-15T06:06:35.667015Z","modified":"2026-08-21T07:15:34.640482629Z","updated_at":"2026-11-02T15:28:24.959902Z"},{"id":"DEBIAN-CVE-2026-61478","status":"published","published":"2026-08-08T10:47:34.638866378Z","modified":"2026-09-12T10:00:25.305164087Z","updated_at":"2026-11-02T15:45:57.932517Z"},{"id":"UBUNTU-CVE-2026-61478","description":"[Unknown description]","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-09-28T17:41:54.842219849Z","updated_at":"2026-11-02T16:56:41.911783Z"},{"id":"USN-8652-1","title":"libvirt vulnerabilities","description":"It was discovered that libvirt incorrectly handled guest reboots in the\nlibxl driver. An attacker in a guest could possibly use this issue to\ncause the libvirt daemon to crash, resulting in a denial of service. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2021-4147)\n\nAlexander Kuznetsov discovered that libvirt incorrectly handled listing\nnetwork interfaces. An attacker could possibly use this issue to cause\nthe libvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-1441)\n\nIt was discovered that libvirt incorrectly handled certain values in its\nRPC library. An attacker could possibly use this issue to cause the\nlibvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-2494)\n\nIt was discovered that libvirt incorrectly handled listing network\ninterfaces under certain circumstances. An attacker could possibly use\nthis issue to cause the libvirt daemon to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2024-2496)\n\nIt was discovered that libvirt incorrectly set permissions on external\ninactive snapshots, making them world-readable. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu\n20.04 LTS. (CVE-2025-13193)\n\nIt was discovered that libvirt incorrectly handled certain characters in\nvirtual network definitions. An authenticated user could possibly use\nthis issue to inject arbitrary configuration directives and execute\narbitrary code as root. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2026-61477)\n\nIt was discovered that libvirt incorrectly handled certain XML input. An\nattacker could possibly use this issue to cause the libvirt daemon to\ncrash, resulting in a denial of service. (CVE-2026-61478)\n\nHe Wei discovered that libvirt incorrectly followed symbolic links when\nchanging file ownership. A local attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63622)\n\nIt was discovered that libvirt incorrectly set permissions on images\nduring storage volume clone and convert operations, making them\ntemporarily world-readable. A local attacker could possibly use this\nissue to obtain sensitive information. (CVE-2026-63623)","status":"published","published":"2026-08-19T16:56:44Z","modified":"2026-08-20T05:29:28.368157919Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8833-1","title":"libvirt-hwe vulnerabilities","description":"It was discovered that libvirt did not properly validate newline characters\nin DNS TXT record values and SRV record attributes in its virtual network\ndriver. A local attacker with permission to define virtual networks could\npossibly use this issue to inject arbitrary dnsmasq configuration\ndirectives, leading to arbitrary command execution as root.\n(CVE-2026-61477)\n\nIt was discovered that libvirt did not properly handle errors during XML\ncontext parsing. An attacker could possibly use this issue to cause libvirt\nto crash, resulting in a denial of service. (CVE-2026-61478)\n\nHe Wei discovered that libvirt had a symlink-following vulnerability in the\nfile ownership change function used for virtual TPM state directories. A\nlocal attacker running as the swtpm user could possibly use this issue to\ncause libvirt to change the ownership of an arbitrary file, leading to\nprivilege escalation. (CVE-2026-63622)\n\nIt was discovered that libvirt created storage volume images with overly\npermissive permissions during clone or convert operations. A local attacker\ncould possibly use this issue to read guest disk contents, resulting in\ninformation disclosure. (CVE-2026-63623)\n\nIt was discovered that libvirt had an integer overflow in the\nNodeGetFreePages RPC handler. A local attacker could possibly use this\nissue to cause libvirt to crash or execute arbitrary code.\n(CVE-2026-18917)\n\nIt was discovered that libvirt had a symlink-following flaw in the virtual\nTPM emulator setup function. A local attacker with access to the swtpm\naccount could possibly use this issue to cause libvirt to change the\nownership of an arbitrary file, leading to privilege escalation.\n(CVE-2026-77159)","status":"published","published":"2026-09-28T11:57:56Z","modified":"2026-09-28T17:42:51.297248796Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}