A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Sep 21, 2026 | Aug 10, 2026 |
| Redhat_linux | — | No solution exists | Aug 12, 2026 | Jul 30, 2026 |
| Ubuntu | — | Upgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-system-sysvUpgrade libvirt-daemon-driver-vboxUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-system-systemd (Ubuntu Pro)Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-gluster (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-vbox (Ubuntu Pro)Upgrade libvirt-clientsUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-secretUpgrade libvirt0Upgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-system (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storageUpgrade libnss-libvirtUpgrade libvirt-daemon-driver-storage-sheepdog (Ubuntu Pro)Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-commonUpgrade libvirt-daemon-driver-storage-zfsUpgrade libvirt-daemon-driver-storage-zfs (Ubuntu Pro)Upgrade libvirt-daemon-driver-lxc (Ubuntu Pro)Upgrade libvirt-devUpgrade libvirt-daemon-driver-xen (Ubuntu Pro)Upgrade libvirt-sanlockUpgrade libvirt-daemon-driver-storage-rbd (Ubuntu Pro)Upgrade libvirt0 (Ubuntu Pro)Upgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-hweUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-sanlock (Ubuntu Pro)Upgrade libvirt-daemon-driver-lxcUpgrade libvirt0-hweUpgrade libvirt-daemonUpgrade libnss-libvirt (Ubuntu Pro)Upgrade libvirt-daemon-system-systemdUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-wireshark (Ubuntu Pro)Upgrade libvirt-login-shellUpgrade libvirt-daemon-systemUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-system-sysv (Ubuntu Pro)Upgrade libvirt-daemon-logUpgrade libvirt-daemon (Ubuntu Pro)Upgrade libvirt-bin (Ubuntu Pro)Upgrade libvirt-daemon-driver-xenUpgrade libvirt-dev (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-system-hweUpgrade libvirt-daemon-commonUpgrade libvirt-wiresharkUpgrade libvirt-clients (Ubuntu Pro)Upgrade libvirt-clients-qemuUpgrade libvirt-daemon-driver-qemu (Ubuntu Pro) | Aug 20, 2026 | Aug 19, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub