USN-8831-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-8831-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8831-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-8831-1
Upstream
CVE (2)
Related
UBUNTU (2)
Published
2026-09-28T11:48:10Z
Modified
2026-09-28T17:42:46Z
Summary
libvirt vulnerabilities
Details

It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-18917)

It was discovered that libvirt did not correctly handle symbolic links when changing ownership of the TPM emulator log file. A local attacker with access to the swtpm account could possibly use this issue to cause libvirt to change the ownership of an arbitrary file. (CVE-2026-77159)

References

Affected packages

Ubuntu:22.04:LTS / libvirt

Package

Name
libvirt
Purl
pkg:deb/ubuntu/libvirt?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.0.0-1ubuntu7.21

Affected versions

7.*
7.6.0-0ubuntu1
7.6.0-0ubuntu3
8.*
8.0.0-1ubuntu3
8.0.0-1ubuntu4
8.0.0-1ubuntu5
8.0.0-1ubuntu6
8.0.0-1ubuntu7
8.0.0-1ubuntu7.1
8.0.0-1ubuntu7.2
8.0.0-1ubuntu7.3
8.0.0-1ubuntu7.4
8.0.0-1ubuntu7.5
8.0.0-1ubuntu7.6
8.0.0-1ubuntu7.7
8.0.0-1ubuntu7.8
8.0.0-1ubuntu7.9
8.0.0-1ubuntu7.10
8.0.0-1ubuntu7.11
8.0.0-1ubuntu7.12
8.0.0-1ubuntu7.13
8.0.0-1ubuntu7.14
8.0.0-1ubuntu7.15
8.0.0-1ubuntu7.16
8.0.0-1ubuntu7.17
8.0.0-1ubuntu7.18
8.0.0-1ubuntu7.19
8.0.0-1ubuntu7.20

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "libnss-libvirt",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-clients",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-config-network",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-config-nwfilter",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-lxc",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-qemu",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-gluster",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-iscsi-direct",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-rbd",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-zfs",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-vbox",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-driver-xen",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-system",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-system-systemd",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-daemon-system-sysv",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-login-shell",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-sanlock",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt-wireshark",
            "binary_version":  "8.0.0-1ubuntu7.21"
        },
        {
            "binary_name":  "libvirt0",
            "binary_version":  "8.0.0-1ubuntu7.21"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [
        {
            "id":  "CVE-2026-18917",
            "severity":  [
                {
                    "score":  "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type":  "CVSS_V3"
                },
                {
                    "score":  "medium",
                    "type":  "Ubuntu"
                }
            ]
        },
        {
            "id":  "CVE-2026-77159",
            "severity":  [
                {
                    "score":  "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                    "type":  "CVSS_V3"
                },
                {
                    "score":  "medium",
                    "type":  "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem":  "Ubuntu:22.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8831-1.json"

Ubuntu:24.04:LTS / libvirt

Package

Name
libvirt
Purl
pkg:deb/ubuntu/libvirt?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
10.0.0-2ubuntu8.19

Affected versions

9.*
9.6.0-1ubuntu1
9.6.0-1ubuntu2
10.*
10.0.0-1ubuntu1
10.0.0-2ubuntu1
10.0.0-2ubuntu5
10.0.0-2ubuntu7
10.0.0-2ubuntu8
10.0.0-2ubuntu8.1
10.0.0-2ubuntu8.2
10.0.0-2ubuntu8.3
10.0.0-2ubuntu8.4
10.0.0-2ubuntu8.5
10.0.0-2ubuntu8.6
10.0.0-2ubuntu8.7
10.0.0-2ubuntu8.8
10.0.0-2ubuntu8.9
10.0.0-2ubuntu8.10
10.0.0-2ubuntu8.11
10.0.0-2ubuntu8.12
10.0.0-2ubuntu8.13
10.0.0-2ubuntu8.14
10.0.0-2ubuntu8.15
10.0.0-2ubuntu8.16
10.0.0-2ubuntu8.17

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "libnss-libvirt",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-clients",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-clients-qemu",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-config-network",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-config-nwfilter",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-lxc",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-qemu",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-gluster",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-iscsi-direct",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-rbd",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-zfs",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-vbox",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-driver-xen",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-system",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-system-systemd",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-daemon-system-sysv",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-l10n",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-login-shell",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-sanlock",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt-wireshark",
            "binary_version":  "10.0.0-2ubuntu8.19"
        },
        {
            "binary_name":  "libvirt0",
            "binary_version":  "10.0.0-2ubuntu8.19"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [
        {
            "id":  "CVE-2026-18917",
            "severity":  [
                {
                    "score":  "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type":  "CVSS_V3"
                },
                {
                    "score":  "medium",
                    "type":  "Ubuntu"
                }
            ]
        },
        {
            "id":  "CVE-2026-77159",
            "severity":  [
                {
                    "score":  "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                    "type":  "CVSS_V3"
                },
                {
                    "score":  "medium",
                    "type":  "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem":  "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8831-1.json"

Ubuntu:26.04:LTS / libvirt

Package

Name
libvirt
Purl
pkg:deb/ubuntu/libvirt?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
12.0.0-1ubuntu5.5

Affected versions

11.*
11.6.0-1ubuntu3
11.6.0-1ubuntu5
11.6.0-1ubuntu6
11.6.0-1ubuntu7
11.6.0-1ubuntu8
12.*
12.0.0-1ubuntu3
12.0.0-1ubuntu5
12.0.0-1ubuntu5.1
12.0.0-1ubuntu5.2
12.0.0-1ubuntu5.3
12.0.0-1ubuntu5.4

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "libnss-libvirt",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-clients",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-clients-qemu",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-common",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-common",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-config-network",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-config-nwfilter",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-interface",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-lxc",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-network",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-nodedev",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-nwfilter",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-qemu",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-secret",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-disk",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-gluster",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-iscsi",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-iscsi-direct",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-logical",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-mpath",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-rbd",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-scsi",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-storage-zfs",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-vbox",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-driver-xen",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-lock",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-log",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-plugin-lockd",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-plugin-sanlock",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-system",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-system-systemd",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-daemon-system-sysv",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-l10n",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-login-shell",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-sanlock",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-ssh-proxy",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt-wireshark",
            "binary_version":  "12.0.0-1ubuntu5.5"
        },
        {
            "binary_name":  "libvirt0",
            "binary_version":  "12.0.0-1ubuntu5.5"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [
        {
            "id":  "CVE-2026-18917",
            "severity":  [
                {
                    "score":  "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type":  "CVSS_V3"
                },
                {
                    "score":  "medium",
                    "type":  "Ubuntu"
                }
            ]
        },
        {
            "id":  "CVE-2026-77159",
            "severity":  [
                {
                    "score":  "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                    "type":  "CVSS_V3"
                },
                {
                    "score":  "medium",
                    "type":  "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem":  "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8831-1.json"