CVE-2025-14525 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-14525 Interim 1 1 2026-03-05T01:24:31Z current 2026-03-05T01:24:31Z 2026-03-05T01:24:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-14525 A flaw was found in kubevirt. A user within a virtual machine (VM), if the guest agent is active, can exploit this by causing the agent to report an excessive number of network interfaces. This action can overwhelm the system's ability to store VM configuration updates, effectively blocking changes to the Virtual Machine Instance (VMI). This allows the VM user to restrict the VM administrator's ability to manage the VM, leading to a denial of service for administrative operations. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2026-February/024084.html E-Mail link for SUSE-SU-2026:0403-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Micro 6.2 openSUSE Leap 15.6 kubevirt kubevirt-container-disk kubevirt-manifests kubevirt-pr-helper-conf kubevirt-tests kubevirt-virt-api kubevirt-virt-controller kubevirt-virt-exportproxy kubevirt-virt-exportserver kubevirt-virt-handler kubevirt-virt-launcher kubevirt-virt-operator kubevirt-virtctl obs-service-kubevirt_containers_meta kubevirt-manifests as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubevirt-virtctl as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubevirt as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kubevirt as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kubevirt-manifests as a component of SUSE Linux Enterprise Micro 5.3 kubevirt-virtctl as a component of SUSE Linux Enterprise Micro 5.3 kubevirt as a component of SUSE Linux Enterprise Micro 5.3 kubevirt-manifests as a component of SUSE Linux Enterprise Micro 5.4 kubevirt-virtctl as a component of SUSE Linux Enterprise Micro 5.4 kubevirt as a component of SUSE Linux Enterprise Micro 5.4 kubevirt-manifests as a component of SUSE Linux Enterprise Micro 5.5 kubevirt-virtctl as a component of SUSE Linux Enterprise Micro 5.5 kubevirt as a component of SUSE Linux Enterprise Micro 5.5 kubevirt-manifests as a component of SUSE Linux Enterprise Module for Containers 15 SP7 kubevirt-virtctl as a component of SUSE Linux Enterprise Module for Containers 15 SP7 kubevirt as a component of SUSE Linux Enterprise Module for Containers 15 SP7 kubevirt as a component of SUSE Linux Enterprise Server 15 SP6-LTSS kubevirt-virtctl as a component of SUSE Linux Enterprise Server 16.0 kubevirt as a component of SUSE Linux Enterprise Server 16.0 kubevirt as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kubevirt-manifests as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubevirt-virtctl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubevirt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kubevirt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kubevirt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 kubevirt-virtctl as a component of SUSE Linux Enterprise Server for SAP applications 16.0 kubevirt as a component of SUSE Linux Enterprise Server for SAP applications 16.0 kubevirt-manifests as a component of SUSE Linux Micro 6.0 kubevirt-virtctl as a component of SUSE Linux Micro 6.0 kubevirt as a component of SUSE Linux Micro 6.0 kubevirt-manifests as a component of SUSE Linux Micro 6.1 kubevirt-virtctl as a component of SUSE Linux Micro 6.1 kubevirt as a component of SUSE Linux Micro 6.1 kubevirt-manifests as a component of SUSE Linux Micro 6.2 kubevirt-virtctl as a component of SUSE Linux Micro 6.2 kubevirt as a component of SUSE Linux Micro 6.2 kubevirt-container-disk as a component of openSUSE Leap 15.6 kubevirt-manifests as a component of openSUSE Leap 15.6 kubevirt-pr-helper-conf as a component of openSUSE Leap 15.6 kubevirt-tests as a component of openSUSE Leap 15.6 kubevirt-virt-api as a component of openSUSE Leap 15.6 kubevirt-virt-controller as a component of openSUSE Leap 15.6 kubevirt-virt-exportproxy as a component of openSUSE Leap 15.6 kubevirt-virt-exportserver as a component of openSUSE Leap 15.6 kubevirt-virt-handler as a component of openSUSE Leap 15.6 kubevirt-virt-launcher as a component of openSUSE Leap 15.6 kubevirt-virt-operator as a component of openSUSE Leap 15.6 kubevirt-virtctl as a component of openSUSE Leap 15.6 obs-service-kubevirt_containers_meta as a component of openSUSE Leap 15.6 kubevirt as a component of openSUSE Leap 15.6 A flaw was found in kubevirt. A user within a virtual machine (VM), if the guest agent is active, can exploit this by causing the agent to report an excessive number of network interfaces. This action can overwhelm the system's ability to store VM configuration updates, effectively blocking changes to the Virtual Machine Instance (VMI). This allows the VM user to restrict the VM administrator's ability to manage the VM, leading to a denial of service for administrative operations. CVE-2025-14525 moderate 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H