Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Ubuntu 25.10 Nova Critical Data Loss Risk CVE-2026-24708

ubuntu
Calendar Grey February 17, 2026
Scroller Ubuntu
Critical advisory for Ubuntu on Nova identifies a severe data destruction risk leading to potential data loss.
Nova could be made to destroy data.

Summary

Nova could be made to destroy data.

Software Description:

- nova: OpenStack Compute cloud infrastructure

Details:

Dan Smith discovered that Nova incorrectly called qemu-img without a format

restriction when resizing disks. An attacker could possibly use this issue

to destroy data on the host system.

Topics%20covered

Topics Covered

security advisory critical Ubuntu data loss nova cloud

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  nova-common                     3:32.0.0-0ubuntu1.1
  python3-nova                    3:32.0.0-0ubuntu1.1

Ubuntu 24.04 LTS
  nova-common                     3:29.2.0-0ubuntu1.3
  python3-nova                    3:29.2.0-0ubuntu1.3

Ubuntu 22.04 LTS
  nova-common                     3:25.2.1-0ubuntu2.10
  python3-nova                    3:25.2.1-0ubuntu2.10

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8049-1

CVE-2026-24708

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8049-1

Topics%20covered

Topics Covered

security advisory critical Ubuntu data loss nova cloud

Package Information

https://launchpad.net/ubuntu/+source/nova/3:32.0.0-0ubuntu1.1
https://launchpad.net/ubuntu/+source/nova/3:29.2.0-0ubuntu1.3
https://launchpad.net/ubuntu/+source/nova/3:25.2.1-0ubuntu2.10

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.