GHSA-4225-xq9f-4ww3

GHSA-4225-xq9f-4ww3 PUBLISHED CVSS 6.300000190734863 MEDIUM

Record from GitHub Advisory Database · Published March 4, 2022

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

Risk scores

CVSS 3.1

6.300000190734863

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Timeline

Mar 4, 2022 CVE Published
Apr 29, 2026 Security Advisory
Apr 30, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-4225-xq9f-4ww3
vulnetix vdb fixes GHSA-4225-xq9f-4ww3

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-4225-xq9f-4ww3/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →