{"schemaVersion":3,"id":"USN-8652-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libvirt vulnerabilities\n\nIt was discovered that libvirt incorrectly handled guest reboots in the\nlibxl driver. An attacker in a guest could possibly use this issue to\ncause the libvirt daemon to crash, resulting in a denial of service. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2021-4147)\n\nAlexander Kuznetsov discovered that libvirt incorrectly handled listing\nnetwork interfaces. An attacker could possibly use this issue to cause\nthe libvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-1441)\n\nIt was discovered that libvirt incorrectly handled certain values in its\nRPC library. An attacker could possibly use this issue to cause the\nlibvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-2494)\n\nIt was discovered that libvirt incorrectly handled listing network\ninterfaces under certain circumstances. An attacker could possibly use\nthis issue to cause the libvirt daemon to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2024-2496)\n\nIt was discovered that libvirt incorrectly set permissions on external\ninactive snapshots, making them world-readable. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu\n20.04 LTS. (CVE-2025-13193)\n\nIt was discovered that libvirt incorrectly handled certain characters in\nvirtual network definitions. An authenticated user could possibly use\nthis issue to inject arbitrary configuration directives and execute\narbitrary code as root. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2026-61477)\n\nIt was discovered that libvirt incorrectly handled certain XML input. An\nattacker could possibly use this issue to cause the libvirt daemon to\ncrash, resulting in a denial of service. (CVE-2026-61478)\n\nHe Wei discovered that libvirt incorrectly followed symbolic links when\nchanging file ownership. A local attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63622)\n\nIt was discovered that libvirt incorrectly set permissions on images\nduring storage volume clone and convert operations, making them\ntemporarily world-readable. A local attacker could possibly use this\nissue to obtain sensitive information. (CVE-2026-63623)","dates":{"published":"2026-08-19T16:56:44.000Z","modified":"2026-08-20T05:29:28.368Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libvirt","name":"libvirt","label":"libvirt","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libvirt","purlType":"deb","versions":[{"text":"< 1.2.2-0ubuntu13.1.28+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.3.1-1ubuntu10.31+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.0-1ubuntu8.21+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 6.0.0-0ubuntu8.20+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.0-1ubuntu7.19","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.0-2ubuntu8.16","noFixRecorded":false,"fixedIn":null},{"text":"< 12.0.0-1ubuntu5.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.2-0ubuntu13.1.28+esm2 | < 1.3.1-1ubuntu10.31+esm1 | < 4.0.0-1ubuntu8.21+esm1 | < 6.0.0-0ubuntu8.20+esm1 | < 8.0.0-1ubuntu7.19 | < 10.0.0-2ubuntu8.16 | < 12.0.0-1ubuntu5.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8652-1","label":"ubuntu.com/security/notices/USN-8652-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4147","label":"ubuntu.com/security/CVE-2021-4147","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-1441","label":"ubuntu.com/security/CVE-2024-1441","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-2494","label":"ubuntu.com/security/CVE-2024-2494","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-2496","label":"ubuntu.com/security/CVE-2024-2496","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-13193","label":"ubuntu.com/security/CVE-2025-13193","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-61477","label":"ubuntu.com/security/CVE-2026-61477","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-61478","label":"ubuntu.com/security/CVE-2026-61478","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-63622","label":"ubuntu.com/security/CVE-2026-63622","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-63623","label":"ubuntu.com/security/CVE-2026-63623","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2021-4147","CVE-2024-1441","CVE-2024-2494","CVE-2024-2496","CVE-2025-13193","CVE-2026-61477","CVE-2026-61478","CVE-2026-63622","CVE-2026-63623"],"downstream":[],"duplicates":[],"related":["CVE-2021-4147","CVE-2024-1441","CVE-2024-2494","CVE-2024-2496","CVE-2025-13193","CVE-2026-61477","CVE-2026-61478","CVE-2026-63622","CVE-2026-63623"]},"timeline":[{"kind":"published","date":"2026-08-19T16:56:44.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-20T05:29:28.368Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T22:29:48.335Z","stale":false,"partial":false}}