logo

Database

Improper resource allocation In kubevirt.io/kubevirt

Description

KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version

Aliases

1. CVE-2026-133222. NVD-2026-133223. OSV-2026-133224. OSV-GO-2026-69125. GHSA-6f2p-2qg2-qqch6. GCVE-2026-133227. ACCESS-CVE-2026-13322

References

1. https://bugzilla.redhat.com/show_bug.cgi?id=24926812. https://github.com/kubevirt/kubevirt/blob/e63503d2f3a166f79f0891f8e1c3450eb39f88ac/pkg/downwardmetrics/virtio-serial/server.go#L240-L251

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.