SUSE-SU-2026:2077-1

CRITICAL9.9

Security update for kubevirt

Published May 26, 2026

Modified 3 weeks ago

Fix available

Details

Description of the patch:

This update for kubevirt fixes the following issue:

CVE-2026-7374: Fixed privilege escalation and node compromise via symlink following vulnerability (bsc#1265467)

Affected Packages

kubevirt-manifests

SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Containers 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

1.7.0-150700.3.21.1

kubevirt-virtctl

SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Containers 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

1.7.0-150700.3.21.1

References

ADVISORY

https://bugzilla.suse.com/1265467

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-May/046774.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-7374/

WEB

https://www.suse.com/support/security/rating/

ADVISORY