GO-2026-6912Published
Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-13322 · Microsoft / collected KEV context
cve-program · CVE-2026-13322
- https://access.redhat.com/security/cve/CVE-2026-13322
- https://bugzilla.redhat.com/show_bug.cgi?id=2492681
euvd · EUVD-2026-39599
- https://access.redhat.com/security/cve/CVE-2026-13322
- https://bugzilla.redhat.com/show_bug.cgi?id=2492681
nvd · CVE-2026-13322
- https://access.redhat.com/security/cve/CVE-2026-13322
- https://bugzilla.redhat.com/show_bug.cgi?id=2492681
osv · GHSA-6f2p-2qg2-qqch
- https://nvd.nist.gov/vuln/detail/CVE-2026-13322
- https://access.redhat.com/security/cve/CVE-2026-13322
- https://bugzilla.redhat.com/show_bug.cgi?id=2492681
- https://github.com/kubevirt/kubevirt
- https://github.com/kubevirt/kubevirt/blob/e63503d2f3a166f79f0891f8e1c3450eb39f88ac/pkg/downwardmetrics/virtio-serial/server.go#L240-L251
osv · GO-2026-6912
- https://github.com/advisories/GHSA-6f2p-2qg2-qqch
- https://nvd.nist.gov/vuln/detail/CVE-2026-13322
- https://access.redhat.com/security/cve/CVE-2026-13322
- https://bugzilla.redhat.com/show_bug.cgi?id=2492681
- https://github.com/kubevirt/kubevirt/blob/e63503d2f3a166f79f0891f8e1c3450eb39f88ac/pkg/downwardmetrics/virtio-serial/server.go#L240-L251
Related operational evidence
Explicit CVE identifiers- KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt · Newly collected advisory · 5 Nov 2026
- KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption · Advisory content revised · 5 Nov 2026
- KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption · Newly collected advisory · 4 Nov 2026