8.2
High
CVE-2026-24708 An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1
Description
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenStack Services on OpenShift 18.0 | Versions not published | |
| Red Hat OpenStack Platform 13 (Queens) | Versions not published | |
| Red Hat OpenStack Platform 16.2 | Versions not published | |
| Red Hat OpenStack Platform 17.1 | Versions not published | |
| Red Hat OpenStack Platform 18.0 | Versions not published | |
| Nova 32.0 | 32.0.0 → < 32.1.1 | 32.1.1 |
| Nova 31.0 | 31.0.0 → < 31.2.1 | 31.2.1 |
| Nova 30.2 | earliest → < 30.2.2 | 30.2.2 |
| Red Hat OpenStack Platform 17.1 for RHEL 9 | Versions not published |
References
- bugs.launchpad.net bugs.launchpad.net
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenStack Services on OpenShift 18.0
The 14 CVEs of Red Hat OpenStack Services on OpenShift 18.0 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-42790
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…
7.6
High
CVE-2026-42789
Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…
7.0
High
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…
7.5
High