SUSE-SU-2026:3939-1: libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:3939-1 is a vulnerability in libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 03-09-2026PublishedVulnerability first disclosed.
- 10-09-2026Last modifiedVulnerability information updated.
Description
Security update for libvirt This update for libvirt fixes the following issues: - CVE-2026-18917: remote: Fix integer overflow in RPC handler for virNodeGetFreePages (bsc#1275863) - CVE-2026-63622: util: virFileChownFiles: do not follow symlinks (bsc#1275264) - CVE-2026-63623: storage: create images with a private umask during qemu-img create/convert (bsc#12075265) - CVE-2026-77159: qemu: tpm: Avoid following symlinks when chown'ing log file (bsc#1274946) - CVE-2026-61477: Reject line breaks in network config (bsc#1274576) - qemu: Fix invocation of numa-preplace when hugepages requested, but page size not specified (bsc#1266364) - Add ClearwaterForest CPU model (jsc#PED-16192)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 11.0.0-150700.4.27.1
- libvirt&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7< 11.0.0-150700.4.27.1
1 vendor · 2 products