Red Hat Security Advisory

RHSA-2026:40779

OpenShift Container Platform 4.21.25 bug fix and security update

Released 2026-07-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.21 rhcos-aarch64-4.21.9.6.202607151836-0, rhcos-ppc64le-4.21.9.6.202607151836-0, rhcos-s390x-4.21.9.6.202607151836-0 +1

Fixes 3 records

TI-2026-38445 CVE-2026-53359 · GHSA-wpw8-53h7-xqcq

KVM: x86: Fix shadow paging use-after-free due to unexpected role

HIGH 73

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01368 Published 2026-07-04 Partial fix · 5.15.222, 6.1.177 +5 CWE-416

TI-2026-33963 CVE-2026-46242 · GHSA-h4r8-4j67-99mx

eventpoll: fix ep_remove struct eventpoll / struct file UAF

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_lock but then kept using…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04576 Published 2026-05-30 Partial fix · 5.15.222, 6.1.178 +5 CWE-416

TI-2026-34037 CVE-2026-46316 · GHSA-qcxh-2cm7-9fcc

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache wit…

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00337 Published 2026-06-09 Partial fix · 6.12.93, 6.18.35 +2 CWE-362