Red Hat Security Advisory

RHSA-2026:77315

OpenShift Container Platform 4.12.100 bug fix and security update

Released 2026-10-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202609271242-0

Fixes 3 records

TI-2026-52253 CVE-2026-74469 · GHSA-772m-42gr-vc4c

sctp: prevent peer transport count overflow

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01467 Published 2026-08-15 Partial fix · 5.10.265, 5.15.216 +6

TI-2026-56013 CVE-2026-81000 · GHSA-32hf-vhcc-85c2

net: tun: bound receive headroom

LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00357 Published 2026-09-11 Partial fix · 5.10.270, 5.15.221 +6

TI-2026-55857 CVE-2026-80844 · GHSA-jv4j-682x-84w7

xfrm: ah6: validate routing header segments_left

LOW 23

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV.

CVSS — EPSS 0.00434 Published 2026-09-04 Partial fix · 5.10.269, 5.15.220 +7