Read the docs
Red Hat Security Advisory

RHSA-2026:28962

OpenShift Container Platform 4.15.66 bug fix and security update

Released 2026-07-06 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 4 records

Priority HIGH 69

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key l…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00639 Published 2026-06-16 Fixed in 5.10.260, 5.15.211 +9 CWE-190
Priority HIGH 69

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00413 Published 2026-06-01 Fixed in 5.10.258, 5.15.209 +6 CWE-20
TI-2026-31217 CVE-2026-43037 · GHSA-p2wf-qj6m-x5fg

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-121
Priority LOW 38

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00573 Published 2026-04-02 Partial fix · 10.3 CWE-281