Red Hat Security AdvisoryRHSA-2026:28962
OpenShift Container Platform 4.15.66 bug fix and security update
Released 2026-07-06 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202606200237-0, rhcos-ppc64le-415.92.202606200237-0, rhcos-s390x-415.92.202606200237-0 +1
Fixes 4 records
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key l…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00639 · Published 2026-06-16 · Fixed in 5.10.260, 5.15.211 +9 CWE-190
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2026-06-01 · Fixed in 5.10.258, 5.15.209 +6 CWE-20
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00688 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-121
Priority LOW 38
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-04-02 · Partial fix · 10.3 CWE-281