Read the docs
Red Hat Security Advisory

RHSA-2026:21695

OpenShift Container Platform 4.12.91 bug fix and security update

Released 2026-06-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1613 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-456
Priority HIGH 84

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.94194 Published 2026-05-08 Fixed in 5.10.255, 5.15.205 +8 CWE-123
Priority MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propaga…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01987 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-691
TI-2025-08904 CVE-2025-9714 · GHSA-fmj5-rvmp-845r

Stack overflow in libxml2

Priority LOW 27

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2025-09-10 Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674
Priority LOW 24

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.02375 Published 2026-03-12 Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908