CVE-2025-12748 Libvirt: denial of service in xml parsing

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Denial of Service Vulnerabilities in Libvirt Identified Two vulnerabilities affecting Libvirt have been reported. CVE-2025-12748, published on November 11, 2025, involves a denial of service due to issues in XML parsing, while CVE-2023-3750, published on July 24, 2023, relates to improper locking in the virstoragepoolobjlistsearch function, which may also lead to denial of service. 2 sources 41