RHSA-2026:20736HighCVSS 9.9

Red Hat Security Advisory: OpenShift Virtualization v4.18 Images

Published
May 26, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-7374 →

📋 Description

CVE-2026-7374 — kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability

🎯 Affected products40

  • Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:750eafa5f95c8375a88b6db482bff63c4d251abbafc394a2123aa958550b29fa_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:a49d896f3e8644bf0f6a8065e10df01e9a1746c431a827ce5ae781b938e15b41_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:a6d3d19e15698990b6e9d64b8979f7f2e74d156abaa3a3afe549c1340df68c1f_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:918377083cfffd28191b05abf888ad5ecb65ba4643204d2885d00b55798c12b0_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:a1d02da4268ad50a42d40485fb0a4f9c91a84383f249a8684fd8fba4cf8809d0_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:b2425b00ef4d6bf0ec94a85d970f065da25c1bfecfd4e56c5366e727ffa03251_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:34dbfb98b98389480bb708e69d84d60c2d18a3c8de113396221f2c2726ffe638_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:3959873edd2158610d4e4e1da8a8856d46c4e970231454ca720da8025c9533c6_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:d97b8df611c37449e73b6e7cc42617f6e308735c4aba85efe3a6fb374105fd6e_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:04b49ea68282a7427c9d3708b98cd053db6f84d6dcafa43a4b131b82b03a76ed_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:0c254168e4f701d5605869d4dcbe557f8ea98fc0e71c1c394d2f0acc5ba5d01a_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:816afae401c1eceefe301705259423688775cc6117f6e1574b9d5e1301a92be6_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:79028d4b9a495cb59abeddde064b3aeea00e0eff7f5676c2711ac9ba2b5708bf_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b114b4bac3d0451a93302af618bf2d9c24befbfb33b033a5adf23c0a596ac7bb_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:f4afd658689690b5e3af940618d53d7dffc956341322cce348fb533e92504e36_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:2e4a80a54417e1a0fb184d4ded1204a649c5de5933a2ff73eb6d6fd1f049cf77_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:3b96758de7f3eea42b4a23b90de6d410b374946048f424573af75c0ccb7e5a40_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e86d35d60246a90d445eb001d4f7742568886885774ebc80db741c674f7debba_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:53ba27db2c53d7ede6b79452848495f6feae00e5d5a609b062678505e521e654_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:70fc206838cec3f541bbc3f42d6920668f4c61743c4d2aadcedbdd5add72156d_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:bae6da19a445d25117500ec45d14445766cc14f681b33da3cc467e060d01a944_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:2e21038d2dd29bbc41a0cb1108d815412ee1015bf5ecbf01de4673a5ddd454bc_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:46eca63b2f39a8ba5001be0bc9d79e95b35f19117c0d360c029a169aa53b05f5_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:9badfb42017bd547d5a7817bbc56f77fd019311f9860f5f38cfc48ade08b4514_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:c22ea804f831cb57316df31ab5712e97b60eb204f4fc0f34fc4f40030b2af95f_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e1a184117a905479a3d345d55663de8027548b69d104cf27d033b55f85f479ef_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e2d81d95bd31766ffaa69d6824956f39c9a728771b4b77ded49312069b8df3e6_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:72272d5baa75d5a14dfa21ca69b4fcfde6b6558a41318b87e7f4fa3c006972de_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:836e7410c0d124b5ef351a8dceb314f47b6aa9537e2cc653fa78154d22880001_s390x as a component of Red Hat Container Native Virtualization 4.18
  • +10 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Update cluster RBAC to not allow exec into virt-launcher pods.

🔗 References (4)