Linux · Security advisory · October 2, 2026
ELSA-2026-74424: Security update for 32 packages
ELSA-2026-74424, released October 2, 2026, fixes 2 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0018
7th percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libvirt | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-client | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-client-qemu | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-common | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-config-network | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-config-nwfilter | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-interface | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-network | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-nodedev | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-nwfilter | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-qemu | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-secret | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage-core | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage-disk | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage-iscsi | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage-logical | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage-mpath | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage-rbd | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-driver-storage-scsi | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-kvm | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-lock | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-log | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-plugin-lockd | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-plugin-sanlock | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-daemon-proxy | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-devel | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-docs | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-libs | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-nss | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
| libvirt-ssh-proxy | ol 9 | 0:11.10.0-12.7.0.1.el9_8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-18917 | Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow | 7.8 | 0.0018 | None reported | |
| High | CVE-2026-63622 | libvirt: A flaw was found in libvirt | 7.8 | 0.0014 | None reported |
Showing 1 to 2 of 2
1