https://seclists.org/oss-sec/2026/q1/173: [OSSA-2026-002] OpenStack Nova: calls qemu-img without format strictions for size (CVE-2026-24708) errata 1

Published Feb 17, 2026
·
Updated

Affected Software

1 affected component
Openstack Nova<30.2.2, >=31.0.0<31.2.1, >=32.0.0<32.1.1
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-24708?

CVE-2026-24708 is classified as a medium severity vulnerability.

2

How do I fix CVE-2026-24708?

To fix CVE-2026-24708, upgrade to OpenStack Nova version 30.2.2 or later.

3

What specifically causes CVE-2026-24708?

CVE-2026-24708 is caused by Nova calling qemu-img without format restrictions during the resize operation.

4

Which versions of Nova are affected by CVE-2026-24708?

All versions of Nova prior to 30.2.2 are affected by CVE-2026-24708.

5

Is CVE-2026-24708 related to any specific OpenStack component?

CVE-2026-24708 specifically affects the Nova component of OpenStack.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203