Red Hat

CVE-2026-121876: A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers (confident

CVE-2026-121876 Nov 12, 2026 Source: Vendor

A flaw was found in the interaction between systemd-gpt-auto-generator and
confidential computing guest VM images in OpenShift Sandboxed Containers
(confidential peer pods). systemd-gpt-auto-generator automatically discovers
and mounts GPT partitions by type GUID at boot with no user confirmation. In
the confidential computing threat model, where the host/hypervisor is the
adversary, a malicious host can inject partitions into the guest's virtual
disk. Most critically, injecting a swap par

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-121876

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1 line

Showing 1–1 of 1

CVE-2026-121876 BR2026-0000-047871 unclaimed

Credited as Red Hat would like to thank Spyros Seimenis (Edgeless Systems) for reporting this issue