Red Hat Security Advisory

RHSA-2026:20087

OpenShift Container Platform 4.16.63 bug fix and security update

Released 2026-05-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202605200242-0, rhcos-ppc64le-416.94.202605200242-0, rhcos-s390x-416.94.202605200242-0 +1

Fixes 5 records

TI-2026-34021 CVE-2026-46300 · GHSA-47jg-vqrv-5f8v

Linux kernel skb coalescing drops shared-frag marker

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1613 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-456

TI-2026-31680 CVE-2026-43503 · GHSA-494p-q444-9xf7

net: skbuff: propagate shared-frag marker through frag-transfer helpers

MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propaga…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01987 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-691

TI-2026-21585 CVE-2026-27135

nghttp2 Denial of service: Assertion failure due to the missing state validation

MEDIUM 40

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00823 Published 2026-03-18 Fixed in 1.68.1 CWE-617

TI-2026-27645 CVE-2026-35535 · GHSA-g5fc-f834-rcr2

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups…

LOW 35

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00177 Published 2026-04-03 Fixed CWE-271

TI-2026-03014 CVE-2026-3497 · GHSA-wcpp-3x59-h8vp

Use of uninitialized resource in Ubuntu openssh

LOW 24

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.02375 Published 2026-03-12 Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908