RLSA-2026:74424

Synopsis

Important: libvirt security, bug fix, and enhancement update

Description

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

* libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (CVE-2026-18917)

Bug Fix(es) and Enhancement(s):

* Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to virtio-vga on target [rhel-9.8.z] (JIRA:Rocky Linux-186018)

* libvirt-guests does not work together with virtlockd on shutdown [rhel-9.8.z] (JIRA:Rocky Linux-224986)

* Expose guest-get-devices in libvirt-api [rhel-9.8.z] (JIRA:Rocky Linux-243306)

* allow hyperv pvpanic "device" to process Windows crash dump [rhel-9.8.z] (JIRA:Rocky Linux-242549)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2513065 2520161

CVEs

CVE-2026-18917 CVE-2026-63622

Affected packages

Rocky Linux 9 aarch64 - AppStream

libvirt-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-0:11.10.0-12.7.el9_8.src.rpm libvirt-client-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-client-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-client-qemu-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-common-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-common-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-config-network-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-config-nwfilter-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-interface-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-interface-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-network-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-network-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-nodedev-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-nodedev-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-nwfilter-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-nwfilter-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-qemu-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-qemu-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-secret-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-secret-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-core-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-core-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-disk-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-disk-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-iscsi-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-iscsi-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-logical-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-logical-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-mpath-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-mpath-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-rbd-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-rbd-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-scsi-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-driver-storage-scsi-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-kvm-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-lock-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-lock-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-log-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-log-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-plugin-lockd-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-plugin-lockd-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-proxy-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-proxy-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-debugsource-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-libs-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-libs-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-nss-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-nss-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-ssh-proxy-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-ssh-proxy-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

libvirt-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-0:11.10.0-12.7.el9_8.src.rpm libvirt-client-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-client-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-common-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-common-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-config-network-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-config-nwfilter-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-interface-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-interface-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-network-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-network-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-nodedev-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-nodedev-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-nwfilter-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-nwfilter-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-secret-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-secret-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-core-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-core-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-disk-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-disk-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-iscsi-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-iscsi-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-logical-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-logical-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-mpath-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-mpath-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-rbd-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-rbd-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-scsi-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-driver-storage-scsi-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-lock-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-lock-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-log-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-log-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-plugin-lockd-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-plugin-lockd-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-proxy-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-daemon-proxy-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-debugsource-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-libs-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-libs-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-nss-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-nss-debuginfo-0:11.10.0-12.7.el9_8.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

libvirt-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-0:11.10.0-12.7.el9_8.src.rpm libvirt-client-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-client-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-client-qemu-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-common-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-common-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-config-network-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-config-nwfilter-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-interface-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-interface-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-network-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-network-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-nodedev-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-nodedev-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-nwfilter-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-nwfilter-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-qemu-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-qemu-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-secret-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-secret-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-core-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-core-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-disk-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-disk-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-iscsi-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-iscsi-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-logical-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-logical-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-mpath-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-mpath-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-rbd-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-rbd-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-scsi-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-driver-storage-scsi-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-kvm-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-lock-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-lock-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-log-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-log-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-plugin-lockd-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-plugin-lockd-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-proxy-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-proxy-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-debugsource-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-libs-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-libs-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-nss-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-nss-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-ssh-proxy-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-ssh-proxy-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

libvirt-0:11.10.0-12.7.el9_8.src.rpm libvirt-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-client-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-client-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-client-qemu-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-common-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-common-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-config-network-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-config-nwfilter-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-interface-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-interface-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-network-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-network-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-nodedev-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-nodedev-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-nwfilter-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-nwfilter-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-qemu-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-qemu-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-secret-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-secret-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-core-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-core-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-disk-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-disk-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-iscsi-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-iscsi-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-logical-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-logical-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-mpath-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-mpath-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-rbd-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-rbd-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-scsi-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-driver-storage-scsi-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-kvm-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-lock-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-lock-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-log-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-log-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-plugin-lockd-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-plugin-lockd-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-proxy-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-proxy-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-debugsource-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-libs-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-libs-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-nss-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-nss-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-ssh-proxy-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-ssh-proxy-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm

Rocky Linux 9 aarch64 - CRB

libvirt-daemon-plugin-sanlock-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-daemon-plugin-sanlock-debuginfo-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-devel-0:11.10.0-12.7.el9_8.aarch64.rpm libvirt-docs-0:11.10.0-12.7.el9_8.aarch64.rpm

Rocky Linux 9 s390x - CRB

libvirt-daemon-plugin-sanlock-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-daemon-plugin-sanlock-debuginfo-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-devel-0:11.10.0-12.7.el9_8.s390x.rpm libvirt-docs-0:11.10.0-12.7.el9_8.s390x.rpm

Rocky Linux 9 x86_64 - CRB

libvirt-daemon-plugin-sanlock-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-daemon-plugin-sanlock-debuginfo-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-devel-0:11.10.0-12.7.el9_8.x86_64.rpm libvirt-docs-0:11.10.0-12.7.el9_8.x86_64.rpm

Rocky Linux 9 ppc64le - CRB

libvirt-devel-0:11.10.0-12.7.el9_8.ppc64le.rpm libvirt-docs-0:11.10.0-12.7.el9_8.ppc64le.rpm