Skip to contentRed Hat Openshift Container Platform vulnerabilities
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)CVE-2026-86566Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoCVE-2026-86848Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapCVE-2026-86567Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: heap out-of-bounds read/write in gso header copyCVE-2026-100236Fix available8.6 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeCVE-2026-86565Fix available8.2 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: double offset bug in vhost log mapping calculationCVE-2026-86563Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)CVE-2026-86562Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: missing memory size validation before mmap in vhost memory region setupCVE-2026-86561Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctouCVE-2026-93683Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable fileCVE-2026-109968Fix available5.5 Medium
- red hat openshift container platform 4.19, openshift container platform 4.20, openshift container platform 4.21 +2 more +4 moreInsights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary executionCVE-2026-1047958.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolCVE-2026-109971Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin written to world-readable fileCVE-2026-109970Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umaskCVE-2026-109969Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indicesCVE-2026-1100363.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connectionCVE-2026-109976Fix available4.7 Medium
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreOpenshift/console: openshift/console: authenticated ssrf via helm chart url fetchCVE-2026-758887.7 High
- red hat build of podman desktop, certification program for red hat enterprise linux 9, edge manager 1 +8 more +10 moreGvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposeCVE-2026-107935Fix available9.3 Critical
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +15 more +17 moreAnsible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionCVE-2026-89091Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruptionCVE-2026-107565Fix available5.1 Medium
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreInsights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerCVE-2026-930177.7 High
- red hat openshift container platform 4, openshift container platform 4.19, openshift container platform 4.20 +3 more +5 moreCluster-samples-operator: role reads all secrets in openshift-config, not just pull-secretCVE-2026-1071766.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreCyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clientsCVE-2026-107161Fix available7.5 High
- red hat openshift serverless, openshift source-to-image (s2i), openshift container platform 4 +2 more +4 moreSource-to-image: source-to-image: security boundary bypass via absolute symbolic link extractionCVE-2026-1071746.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd-kcm: local denial of service via excessive memory preallocationCVE-2026-800485.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via race condition in autofs responderCVE-2026-1040454.7 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via incomplete identity provider authentication requestsCVE-2026-1040466.2 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: authorization bypass via cross-domain username collision in hbac evaluationCVE-2026-1040486.8 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: information disclosure via query injection in entra id lookupsCVE-2026-1040475.3 Medium
- red hat openshift container platform 4Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypassCVE-2026-760615.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustionCVE-2026-882524.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via crafted passkey kerberos authentication requestCVE-2026-1040446.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via undersized packet parsing in nss responderCVE-2026-1040435.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via out-of-bounds read in pam responderCVE-2026-1040425.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via unbounded negative cache growthCVE-2026-1040415.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via stale connection state reuse in pam gssapi responderCVE-2026-1040394.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via missing sid extension in certificate mappingCVE-2026-1040385.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via packet length underflow in autofs responderCVE-2026-1040375.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: access control bypass via premature ldap access rule evaluationCVE-2026-928216.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via out-of-bounds write in nfs idmap pluginCVE-2026-104036Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via memory exhaustion in kcm responderCVE-2026-1040355.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via use-after-free in kcm ticket renewalCVE-2026-1040344.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: access control bypass via improper ldap shadow expiration checkCVE-2026-1040335.4 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via unprivileged autofs cache invalidationCVE-2026-1040325.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via memory exhaustion in autofs responderCVE-2026-1040315.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via out-of-bounds read in autofs responderCVE-2026-1040293.3 Low
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service via out-of-bounds read during passkey parsingCVE-2026-1040305.5 Medium
- red hat assisted installer for red hat openshift container platform 2, openshift container platform 4.18, openshift container platform 4.19 +4 more +6 moreOc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabledCVE-2026-965777.1 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreOauth-proxy: open redirect via /\ and /\t bypass in post-login redirectCVE-2026-835896.1 Medium
- red hat assisted installer for red hat openshift container platform 2, openshift container platform 4.13, openshift container platform 4.15 +2 more +4 moreOc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extractionCVE-2026-1012957.3 High
- Show moreLoading…