{"id":"CVE-2026-13322","revision":"8859a64c54254064b5319fe9f8425927","records":[{"revision":"8859a64c54254064b5319fe9f8425927","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-13322","aliases":[],"title":"Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service","description":"A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Reader.ReadLine(), which buffers input indefinitely until a newline character is received, with no length limit or read deadline. A user with access to a VM guest that has the downward metrics virtio-serial device configured can write a continuous byte stream to the device, causing unbounded memory allocation in the virt-handler process until it is OOM-killed.","state":0,"publishedAt":"2026-06-26T00:04:07.651+00:00","modifiedAt":"2026-06-26T13:39:15.504+00:00","affected":[{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-native-virtualization/virt-handler","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Virtualization 4\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"container-native-virtualization/virt-handler\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:container_native_virtualization:4\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-native-virtualization/virt-handler-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Virtualization 4\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"container-native-virtualization/virt-handler-rhel9\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:container_native_virtualization:4\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","score":3.8,"severity":"LOW"}],"references":["https://access.redhat.com/security/cve/CVE-2026-13322","https://bugzilla.redhat.com/show_bug.cgi?id=2492681"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-13322","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-13322","identifiers":["CVE-2026-13322"]},"retained":false,"historicalAffected":[]}],"coverage":[]}