Read the docs
Red Hat Security Advisory

RHSA-2026:25044

OpenShift Container Platform 4.16.64 bug fix and security update

Released 2026-06-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

TI-2026-34021 CVE-2026-46300 · GHSA-47jg-vqrv-5f8v

Linux kernel skb coalescing drops shared-frag marker

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1613 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-456
TI-2026-31217 CVE-2026-43037 · GHSA-p2wf-qj6m-x5fg

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-121
TI-2026-31680 CVE-2026-43503 · GHSA-494p-q444-9xf7

net: skbuff: propagate shared-frag marker through frag-transfer helpers

Priority MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propaga…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01987 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-691
TI-2026-33761 CVE-2026-46037 · GHSA-hxj2-jf3v-xp24

ipv4: icmp: validate reply type before using icmp_pointers

Priority MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: validate reply type before using icmp_pointers Extended echo replies use ICMP_EXT_ECHOREPLY as the outbound reply type.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00512 Published 2026-05-27 Partial fix · 5.15.209, 6.1.175 +5 CWE-125
TI-2026-27521 CVE-2026-35385 · GHSA-jgqr-738j-43cg

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an…

Priority LOW 38

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00573 Published 2026-04-02 Partial fix · 10.3 CWE-281