Red Hat Security Advisory

RHSA-2026:44232

OpenShift Container Platform 4.22.7 bug fix and security update

Released 2026-07-28 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202607220526-0, rhcos-ppc64le-4.22.9.8.202607220526-0, rhcos-s390x-4.22.9.8.202607220526-0 +1

Fixes 3 records

TI-2026-31217 CVE-2026-43037 · GHSA-p2wf-qj6m-x5fg

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-121

TI-2026-10734 CVE-2026-12505 · GHSA-58j9-p7xf-pjx7

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

LOW 35

A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2026-06-18 Partial fix · 7.6-1.el10_2, 7.0-5.el8_10 +2 CWE-250

TI-2026-41169 CVE-2026-57231 · GHSA-4hq8-gpf5-8p68

Podman: Malformed Image can trick podman run into leaking host environment variables into the container

LOW 33

Podman is a tool for managing OCI containers and pods.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-06-26 Partial fix · 5.8.4, 6.0.0 CWE-200