KubeVirt v1.8.3 focuses on hardening the platform through critical bug fixes for hardware passthrough, networking, and security. It improves the reliability of VM lifecycle operations like live migrations and snapshots by making health checks more intelligent, while also addressing high-impact issues such as etcd size limits and RBAC authorization truncation.

Scale memlock rlimit for multi-device VFIO passthrough — Ensures that VMs using host device passthrough (like GPUs) can start reliably by correctly calculating and setting memory locking limits, preventing 'cannot limit locked memory' errors.

Resilient GuestAgentPing probes during VM lifecycle events — Prevents unnecessary pod restarts during maintenance tasks like live migration, snapshots, or VM pauses by making liveness probes more resilient to temporary guest agent unavailability.

Fix symlink traversal in VMExport and update gRPC for security CVE — Protects the infrastructure from potential unauthorized file access via VMExport and addresses a critical vulnerability in the gRPC library.

Prevent etcd object size limit exhaustion in virt-operator — Prevents the KubeVirt custom resource from growing so large that it crashes the Kubernetes backend (etcd) when resource creation errors occur.

IPv6 networking and cross-namespace migration fixes — Fixes cross-namespace live migration for IPv6-only clusters and ensures correct IP reporting for VMs using bridge networking with IPv6.