Red Hat Security Advisory

RHSA-2026:43252

OpenShift Container Platform 4.14.70 bug fix and security update

Released 2026-07-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202607210313-0, rhcos-ppc64le-414.92.202607210313-0, rhcos-s390x-414.92.202607210313-0 +1

Fixes 4 records

TI-2026-04772 CVE-2026-5450 · GHSA-v898-xg3c-w4rj

scanf %mc off-by-one heap buffer overflow

HIGH 82

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2026-04-20 Partial fix CWE-122

TI-2026-38445 CVE-2026-53359 · GHSA-wpw8-53h7-xqcq

KVM: x86: Fix shadow paging use-after-free due to unexpected role

HIGH 73

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01368 Published 2026-07-04 Partial fix · 5.15.222, 6.1.177 +5 CWE-416

TI-2026-24346 CVE-2026-31790 · GHSA-vgxx-5xj5-q97x

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

MEDIUM 41

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01049 Published 2026-04-07 Partial fix · 3.6.2, 3.5.6 +3 CWE-754

TI-2026-31508 CVE-2026-43329 · GHSA-45q4-4828-537r

netfilter: flowtable: strictly check for maximum number of actions

LOW 35

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangl…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00178 Published 2026-05-08 Partial fix · 5.15.203, 6.1.168 +5 CWE-122