VDB

CVE-2026-18917

CVE-2026-18917 PUBLISHED CVSS 7.8 HIGH

Reported by redhat · Published August 20, 2026

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local privilege escalation.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red HatRed Hat Enterprise Linux 100:11.10.0-12.9.el10_2
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:10.10.0-8.12.el10_0
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:4.5.0-36.el7_9.7
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support8040020260916092751.522a0ee4
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On8040020260916092751.522a0ee4
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support8060020260910092451.ad008a3a
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On8060020260910092451.ad008a3a
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service8080020260910092120.63b34585
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions8080020260910092120.63b34585
Red HatRed Hat Enterprise Linux 90:11.10.0-12.7.el9_8
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:9.0.0-10.17.el9_2
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:10.0.0-6.24.el9_4
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:10.10.0-7.19.el9_6
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux for NVIDIA 26
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support8060020260910092451.ad008a3a, 8060020260910092451.ad008a3a, 8060020260910092451.ad008a3a
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:4.5.0-36.el7_9.7, 0:4.5.0-36.el7_9.7, 0:4.5.0-36.el7_9.7
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:9.0.0-10.17.el9_2, 0:9.0.0-10.17.el9_2, 0:9.0.0-10.17.el9_2
Red HatRed Hat Enterprise Linux 100:11.10.0-12.9.el10_2

…and 13 more

Timeline

  • Aug 20, 2026 CVE Published
  • Aug 22, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Sep 2, 2026 Security Advisory
  • Sep 9, 2026 EPSS Score
  • Sep 16, 2026 EPSS Score
  • Sep 17, 2026 EPSS Score
  • Sep 21, 2026 EPSS Score
  • Sep 21, 2026 Distribution Patch
  • Sep 21, 2026 Security Advisory
  • Sep 21, 2026 Distribution Patch
  • Sep 21, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›