Threats affecting pkg:rpm/redhat/openshift-virtualization

CVE-2026-6383 is a medium-severity vulnerability in Red Hat OpenShift Virtualization 4 caused by incorrect authorization in KubeVirt's RBAC evaluation logic. The flaw arises from improper truncation of subresource names during permission checks, which can lead to authenticated users with certain custom roles gaining unauthorized access to subresources. This may result in unauthorized disclosure of sensitive information or unauthorized actions. Conversely, some legitimate users might be incorrectly denied access to resources. No official patch or remediation level has been confirmed yet according to the vendor advisory.