{"action":"Upgrade libvirt to 7.6.0-1 or later.","affected":[{"fixed":"7.6.0-1","introduced":"0"}],"component":"libvirt","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["7.6.0-1"],"id":"tcs_01M5NFTAY2PNP2PRDPXB88FVXJ","modified_at":"2026-10-23T18:03:49.844319277Z","published_at":"2022-03-02T23:15:08.677Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-3631","https://security-tracker.debian.org/tracker/CVE-2021-3631"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-3631#Debian:13/libvirt","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-3631"}],"summary":"A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the brea"}