CVE catalog
CVE-2023-26484
kubevirt-container-disk-0.59.0-2.1 on GA media
- Severity
- High · CVSS 8
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.61% · Oct 25, 2026
This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: - CVE-2023-26484: Limit operator secrets permission. (bsc#1209359) kubevirt is also rebuilt with a supported GO compiler (bsc#1208916)
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | kubevirt | linux enterprise micro 5.3 | 0.54.0-150400.3.13.1 | fixed |
| Suse | kubevirt | linux enterprise micro 5.4 | 0.54.0-150400.3.13.1 | fixed |
| Suse | kubevirt | linux enterprise module for containers 15 sp4 | 0.54.0-150400.3.13.1 | fixed |
| Opensuse | kubevirt | leap micro 5.3 | 0.54.0-150400.3.13.1 | fixed |
| Opensuse | kubevirt | leap 15.4 | 0.54.0-150400.3.13.1 | fixed |
| Opensuse | kubevirt | tumbleweed | 0.59.0-2.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | kubevirt | rpm | linux enterprise micro 5.3 | 0.54.0-150400.3.13.1 | Not reported | SUSE-SU-2023:1967-1 | Not reported |
| Suse | kubevirt | rpm | linux enterprise micro 5.4 | 0.54.0-150400.3.13.1 | Not reported | SUSE-SU-2023:1967-1 | Not reported |
| Suse | kubevirt | rpm | linux enterprise module for containers 15 sp4 | 0.54.0-150400.3.13.1 | Not reported | SUSE-SU-2023:1967-1 | Not reported |
| Opensuse | kubevirt | rpm | leap micro 5.3 | 0.54.0-150400.3.13.1 | Not reported | SUSE-SU-2023:1967-1 | Not reported |
| Opensuse | kubevirt | rpm | leap 15.4 | 0.54.0-150400.3.13.1 | Not reported | SUSE-SU-2023:1967-1 | Not reported |
| Opensuse | kubevirt | rpm | tumbleweed | 0.59.0-2.1 | Not reported | OPENSUSE-SU-2024:12792-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.