Red Hat Security AdvisoryRHSA-2026:40764
OpenShift Container Platform 4.22.6 bug fix and security update
Released 2026-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202607152026-0, rhcos-ppc64le-4.22.9.8.202607152026-0, rhcos-s390x-4.22.9.8.202607152026-0 +1
Fixes 6 records
Priority HIGH 73
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01368 · Published 2026-07-04 · Partial fix · 5.15.222, 6.1.177 +5 CWE-416
Priority MEDIUM 48
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00544 · Published 2026-06-09 · Partial fix CWE-362
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_lock but then kept using…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04576 · Published 2026-05-30 · Partial fix · 5.15.222, 6.1.178 +5 CWE-416
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache wit…
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00337 · Published 2026-06-09 · Partial fix · 6.12.93, 6.18.35 +2 CWE-362
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only del…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00352 · Published 2026-05-06 · Partial fix · 5.15.209, 6.1.175 +5 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangl…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2026-05-08 · Partial fix · 5.15.203, 6.1.168 +5 CWE-122