Red Hat Security AdvisoryRHSA-2026:54187
OpenShift Container Platform 4.13.70 bug fix and security update
Released 2026-08-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202608111330-0
Fixes 7 records
Priority HIGH 73
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01368 · Published 2026-07-04 · Partial fix · 5.15.222, 6.1.177 +5 CWE-416
Priority MEDIUM 48
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00544 · Published 2026-06-09 · Partial fix CWE-362
Priority MEDIUM 41
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01049 · Published 2026-04-07 · Partial fix · 3.6.2, 3.5.6 +3 CWE-754
Priority MEDIUM 41
A flaw was found in SSSD's LDAP sudo provider.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00568 · Published 2026-07-07 · Partial fix · 2.12.0-3.el10_2.1, 2.10.2-3.el10_0.5 +20 CWE-1188
Priority LOW 38
A path traversal flaw was found in SSSD's AD GPO provider.
CVSS 3.1HIGH 8.0· Network · High privileges · No interaction · EPSS 0.00668 · Published 2026-07-07 · Partial fix · 2.12.0-3.el10_2.1, 2.10.2-3.el10_0.5 +20 CWE-23
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangl…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2026-05-08 · Partial fix · 5.15.203, 6.1.168 +5 CWE-122
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O,…
CVSS 3.1HIGH 7.9· Local · Low privileges · No interaction · EPSS 0.0017 · Published 2025-10-28 · Partial fix · 5.4.301, 5.10.246 +7