Author: Gaurav Mehta
May 8, 2026 10:06 am
3,316 viewsAddressing Copy.Fail2 aka DirtyFrag in SUSE Virtualization
Security researchers have identified another security issue similar to copy.fail (CVE-2026-43284 / CVE-2026-43500), however in a different subsystem.
Upstream report: https://github.com/V4bel/dirtyfrag
This is again a bug in splice handling allowing local attackers to execute code to gain full root privileges in the system, one via the xfrm / esp4 and esp6 UDP […]
Categories: SUSE Virtualization
May 6, 2026 5:24 am
646 viewsHow vGPU passthrough works in SUSE Virtualization
SUSE Virtualization is for running virtual machines, whether they are legacy applications, cloud-native workloads, or a combination of the two.
SUSE Virtualization has supported PCIDevice passthrough to VM workloads since v1.1.x
vGPU support was added with v1.3.x, with MIG-backed vGPU Devices added in v1.7.x
How device passthrough works in […]
Categories: Rancher Blog, SUSE Blog, SUSE Virtualization
April 30, 2026 9:32 am
2,409 viewsAddressing copy.fail in SUSE Virtualization
Copy Fail (tracked as CVE-2026-31431) is a critical vulnerability in
the Linux kernel that allows a local non-root user to gain full root
access to the system.
It is considered extremely dangerous because it is a pure logic error
– unlike other known holes like Dirty Pipe or Dirty COW, it does not
require complex […]
Categories: SUSE Virtualization
September 17, 2025 11:54 pm
1,168 viewsHow SUSE Virtualization engineering teams leverage support-bundle-kit
SUSE Virtualization is for running virtual machines, whether they are legacy applications, cloud-native workloads, or a combination of the two.
Whenever a user runs into an issue specific to their environment, a common ask for the issue reporter is to provide a Support Bundle.
What happens under the hood?
When a user triggers a supportbundle […]
Categories: SUSE Blog, SUSE Virtualization
April 22, 2021 7:32 pm
10,472 viewsCanary Releases with Rancher Continuous Delivery
Rancher Continuous Delivery, available since Rancher version 2.5.x, brings the ability to perform GitOps at scale on Rancher-managed clusters. Continuous Delivery, powered by Fleet, allows users to manage the state of their clusters using a GitOps based approach.
Canary release is a popular technique used by software developers to release a […]
Tags: Continuous Delivery, Fleet, GitOps, Kubernetes, Rancher
Categories: Featured Content, Kubernetes, Rancher Kubernetes, SUSE News