Medium severity5.5NVD Advisory· Published Sep 11, 2026· Updated Sep 16, 2026
CVE-2026-77159
CVE-2026-77159
Description
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords2 versionspkg:rpm/opensuse/libvirt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweed
< 11.4.0-160000.5.1+ 1 more
- (no CPE)range: < 11.4.0-160000.5.1
- (no CPE)range: < 12.6.0-2.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.