CVE-2014-8136: The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvir...

Security readout for executives and security teams

This is a local denial-of-service issue in libvirt's QEMU migration handling. If an ACL check fails, libvirt may leave a virtual machine domain locked, potentially disrupting management operations. It matters most for older virtualization hosts where local users can interact with libvirt. Exposure is most likely on legacy systems running libvirt with the QEMU driver, especially distributions covered by 2015 vendor advisories. The provided data does not identify exact affected versions, so package-level validation against vendor advisories is required. Handle during normal vulnerability remediation unless the environment has shared local users on virtualization hosts. Raise priority for multi-tenant admin systems, exposed management shells, or unsupported libvirt deployments. Mitigation focus: Check libvirt vendor advisories for affected package versions and fixed builds.; Apply supported distribution updates for libvirt where applicable.; Restrict libvirt access to trusted administrative users only..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.