libvirt: symlink-following chown on the swtpm logfile hands arbitrary file ownership to the swtpm user

Impact

libvirtd runs as root and chowns the swtpm logfile by path without checking for symlinks. A local attacker who already controls the swtpm account can point that path at any file on the host and have libvirtd transfer its ownership to swtpm, which is a stepping stone to further privilege escalation on the hypervisor. On a GPU host running VMs with passed-through accelerators, the hypervisor is the trust boundary between tenant VMs and the fabric, so any root-mediated file operation that a lower-privileged service account can redirect is worth closing. Exploitation requires prior control of the swtpm account, which limits this to chained attacks rather than a direct tenant-to-root jump.

Who can reach it

Local, authenticated: an attacker who already has code execution as the swtpm service account on the virtualization host. Not reachable from a guest or from the network on its own.

What to do

Apply the libvirt update from your distribution when it ships (Red Hat tracks this across RHEL 6 through 10; check the vendor link for the fixed build for your release). Applying it means restarting libvirtd, which does not require stopping running guests but does interrupt management operations briefly - a daemon restart rather than a node drain. Until a package is available, no mitigation is named in the advisory beyond restricting access to the swtpm account and hosts that do not use emulated TPM are not exposed.

References

Related entries

• AMD SEV-ES (CacheWarp): CacheWarp: INVD lets a malicious hypervisor revert SEV-ES guest memory writes, breaking guestCVE-2023-20592 · AMD SEV-ES (CacheWarp)Medium
• Linux kernel (drivers/pci): When the kernel coalesces two adjacent host-bridge apertures it invalidates the absorbedCVE-2023-53814 · Linux kernel (drivers/pci)Medium
• AMD SEV-SNP (BadRAM): BadRAM: improper validation of DIMM SPD metadata lets an attacker with physical access or ring0CVE-2024-21944 · AMD SEV-SNP (BadRAM)Medium
• libuser: direct /etc/passwd rewrites can corrupt the account database and chain to local rootCVE-2015-3246 · libuser / usermode userhelper (/etc/passwd modification on RHEL)Medium
• Linux KVM/SVM - missing sev_decommission in sev_receive_start: KVM failed to DECOMMISSION the current SEV contextCVE-2021-47389 · Linux KVM/SVM - missing sev_decommission in sev_receive_startMedium
• QEMU VMDK driver: a crafted image causes an out-of-bounds read leaking 12 bytes or crashing the processCVE-2026-2243 · QEMU VMDK block driver (out-of-bounds read while parsing the image)Medium