The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-nssUpgrade libvirt-bash-completionUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-debuginfoUpgrade libvirt-login-shellUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-lock-sanlockUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lxcUpgrade libvirt-adminUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logical | Oct 19, 2026 | Oct 19, 2026 |
| Debian | — | Upgrade libvirt | Sep 21, 2026 | Aug 7, 2026 |
| Redhat_linux | — | No solution exists | Aug 10, 2026 | Aug 6, 2026 |
| Ubuntu | — | Upgrade libvirt-daemon-driver-vbox (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-rbd (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-systemUpgrade libvirt-daemon-system (Ubuntu Pro)Upgrade libvirt0-hweUpgrade libvirt0 (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-xenUpgrade libvirt-daemon-driver-qemu (Ubuntu Pro)Upgrade libvirt-clientsUpgrade libvirt-daemon (Ubuntu Pro)Upgrade libvirt-commonUpgrade libvirt-daemon-driver-nodedevUpgrade libnss-libvirtUpgrade libvirt-bin (Ubuntu Pro)Upgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-sanlock (Ubuntu Pro)Upgrade libvirt-daemon-system-sysvUpgrade libvirt-daemon-driver-lxc (Ubuntu Pro)Upgrade libvirt0Upgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-sheepdog (Ubuntu Pro)Upgrade libvirt-daemon-system-systemdUpgrade libvirt-daemon-driver-xen (Ubuntu Pro)Upgrade libvirt-daemon-driver-vboxUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-zfsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-wiresharkUpgrade libvirt-sanlockUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-hweUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-zfs (Ubuntu Pro)Upgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-dev (Ubuntu Pro)Upgrade libvirt-daemon-system-sysv (Ubuntu Pro)Upgrade libvirt-clients-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libnss-libvirt (Ubuntu Pro)Upgrade libvirt-daemon-system-hweUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-wireshark (Ubuntu Pro)Upgrade libvirt-devUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-gluster (Ubuntu Pro)Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clients (Ubuntu Pro)Upgrade libvirt-daemon-system-systemd (Ubuntu Pro)Upgrade libvirt-daemon-config-network | Aug 20, 2026 | Aug 19, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub