Wind River Support Network

HomeDefectsLIN1022-39367

Acknowledged

LIN1022-39367 : Security Advisory - libvirt - CVE-2026-77159

Created: Oct 23, 2026 Updated: Oct 27, 2026

Resolved Date: Oct 23, 2026

Found In Version: 10.22.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user.
Data source: Red Hat, Inc. (secalert@redhat.com)