Red Hat Security AdvisoryRHSA-2026:40021
OpenShift Container Platform 4.13.69 bug fix and security update
Released 2026-07-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202607141229-0
Fixes 4 records
Priority HIGH 82
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one by…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00502 · Published 2026-04-20 · Partial fix CWE-122
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key l…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00639 · Published 2026-06-16 · Fixed in 5.10.260, 5.15.211 +9 CWE-190
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2026-06-01 · Fixed in 5.10.258, 5.15.209 +6 CWE-20
Priority MEDIUM 42
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01687 · Published 2026-03-25 · Fixed CWE-606