KVM Vulnerability - CVE-2026-99082

the fix is in Proxmox kernels starting with pve-kernel-7.0.14-25-pve

edit: as is often the case these days - the fix was picked before it got assigned a CVE (2026-10-17 vs 2016-10-23), which is why the CVE is not included in the git or package changelogs..
 
  • Like
Reactions: UdoB
Thanks for the feedback :)
Is proxmox publishing somwhere update security advisory with matching CVE or any other public security referential ?

I see a section on forum, but doesn't seems to contain CVE related too
 
we do not publish a PSA for every kernel CVE, there are too many (e.g., there have been 45 for KVM alone in the past month, and there might be more fixes that are already rolled out that do not yet have a CVE assigned publicly).
 
Wondering if people starting those threads like this one here think that the Proxmox developers live under a rock...
 
  • Like
Reactions: milov
You must log in or register to reply here.
Top Bottom
Back