VDB
ALSA-2026%3A5578
ALSA-2026%3A5578
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Record from OSV · Published March 24, 2026
Moderate: virt:rhel and virt-devel:rhel security update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| supermin-devel | AlmaLinux:8 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| libvirt-daemon-driver-storage-rbd | AlmaLinux:8 | 8.0.0-23.4.module_el8.10.0+4031+06966654 |
| libvirt-daemon-driver-qemu | AlmaLinux:8 | 8.0.0-23.4.module_el8.10.0+4031+06966654 |
| python3-hivex | AlmaLinux:8 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5, 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| libguestfs-inspect-icons | AlmaLinux:8 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| libguestfs-man-pages-uk | AlmaLinux:8 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| swtpm | AlmaLinux:8 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| libtpms | AlmaLinux:8 | 0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654 |
| libvirt-libs | AlmaLinux:8 | 8.0.0-23.4.module_el8.10.0+4031+06966654 |
| libvirt-daemon-driver-nodedev | AlmaLinux:8 | 8.0.0-23.4.module_el8.10.0+4031+06966654 |
| virt-v2v-bash-completion | AlmaLinux:8 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| qemu-kvm-common | AlmaLinux:8 | 15:6.2.0-53.module_el8.10.0+4110+4a319788.6 |
66 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | python3-hivex | 0, 0 |
| AlmaLinux:8 | libguestfs-inspect-icons | 0 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 |
| AlmaLinux:8 | libnbd-bash-completion | 0 |
| AlmaLinux:8 | seabios-bin | 0 |
| AlmaLinux:8 | ruby-hivex | 0, 0 |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 |
| AlmaLinux:8 | qemu-kvm-hw-usbredir | 0 |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 |
| AlmaLinux:8 | nbdkit-tar-filter | 0 |
| AlmaLinux:8 | nbdkit-devel | 0 |
| AlmaLinux:8 | libguestfs-tools-c | 0 |
| AlmaLinux:8 | libguestfs-gobject-devel | 0 |
| AlmaLinux:8 | sgabios-bin | 0 |
| AlmaLinux:8 | python3-libvirt | 0 |
| AlmaLinux:8 | python3-libnbd | 0 |
| AlmaLinux:8 | nbdkit-basic-filters | 0 |
| AlmaLinux:8 | nbdkit-ssh-plugin | 0 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 |
…and 110 more
Timeline
- Mar 24, 2026 CVE Published
- Mar 26, 2026 CVE Updated
- Mar 28, 2026 Distribution Patch (2 in total, the first dated here)
- Mar 28, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln ALSA-2026%3A5578
vulnetix vdb fixes ALSA-2026%3A5578Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/ALSA-2026%253A5578/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart