< Back to all clusters
[TECHNOLOGY] · Germany · 6 sources

started · updated

SUSE addresses critical CVE-2026-25727 vulnerability in virtiofsd

A critical security vulnerability, identified as CVE-2026-25727, has been discovered in the virtiofsd virtualization component. The flaw, which carries a high CVSS score of 8.7, stems from an error in the daemon's RFC-2822 date parser. This error can lead to stack exhaustion, potentially compromising the stability and security of virtualized infrastructures.

Multiple operating system variants are affected by this vulnerability, including openSUSE Leap 15.6, SUSE Linux Enterprise Server (SLES) 15 SP6, and SLES for SAP 15 SP6. Because virtiofsd is essential for file exchange between host and guest systems in virtual machines, timely patching is required to maintain system integrity. SUSE has addressed the issue through security update SUSE-SU-2026:0816-1, which administrators can apply using the zypper patch package manager.

Entities

M-net · SUSE · openSUSE