Libvirt

An integer overflow vulnerability (CVE-2026-18917) in the libvirt NodeGetFreePages RPC handler allows an unprivileged local user to trigger a heap buffer overflow and achieve potential local privilege escalation.

A local privilege escalation vulnerability in libvirt allows a confined swtpm process to trick the libvirt daemon into changing file ownership through symlink following, potentially granting root-level file access.

Multiple vulnerabilities exist in QEMU and libvirt, which can be exploited by a local attacker to disclose sensitive information and bypass security mechanisms, potentially leading to privilege escalation.