Read the docs
Red Hat Security Advisory

RHSA-2026:82811

OpenShift Container Platform 4.15.70 bug fix and security update

Released 2026-10-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 10 records

TI-2026-52253 CVE-2026-74469 · GHSA-772m-42gr-vc4c

sctp: prevent peer transport count overflow

Priority MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01467 Published 2026-08-15 Partial fix · 5.10.265, 5.15.216 +6
Priority LOW 38

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00182 Published 2026-06-09 Partial fix · 3.53.2 CWE-122
Priority LOW 37

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00153 Published 2026-06-29 Partial fix · 2.4.0 CWE-59
TI-2026-56013 CVE-2026-81000 · GHSA-32hf-vhcc-85c2

net: tun: bound receive headroom

Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00357 Published 2026-09-11 Partial fix · 5.10.270, 5.15.221 +6
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00367 Published 2026-08-10 Partial fix · 5.10.265, 5.15.216 +6 CWE-416
Priority LOW 31

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00195 Published 2026-06-09 Partial fix · 3.53.2 CWE-125
Priority LOW 23

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV.

CVSS — EPSS 0.00434 Published 2026-09-04 Partial fix · 5.10.269, 5.15.220 +7