CVE-2026-18917
Publication date 20 August 2026
Last updated 28 September 2026
Ubuntu priority
Description
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local privilege escalation.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| libvirt | 26.04 LTS resolute |
Fixed 12.0.0-1ubuntu5.5
|
| 24.04 LTS noble |
Fixed 10.0.0-2ubuntu8.19
|
|
| 22.04 LTS jammy |
Fixed 8.0.0-1ubuntu7.21
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
|
| 14.04 LTS trusty |
Needs evaluation
|
|
| libvirt-hwe | 26.04 LTS resolute |
Fixed 12.0.0-1ubuntu5.5
|
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
7.8 · High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-8831-1
- libvirt vulnerabilities
- 28 September 2026
- USN-8833-1
- libvirt vulnerabilities
- 28 September 2026