Search: CVE-2026-18917

An integer overflow vulnerability exists in the libvirt library used by Red Hat Enterprise Linux 10. An unprivileged local user can exploit this flaw in the NodeGetFreePages RPC handler to cause a heap buffer overflow. This may lead to corruption of the libvirt daemon's memory, potentially resulting in denial of service or local privilege escalation. A security update addressing this issue is available for Red Hat Enterprise Linux 9.4 and related variants.