Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
Priority LOW 32CWE-367Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 37 fixed, 3 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00209 11th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Partial Red Hat: 42 advisoriesRed Hat: 37 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | 2.69-7.el10_1.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | 2.69-7.el10_2.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 2.69-7.el10_0.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.48-6.el8_10.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | 2.48-4.el8_6.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | 2.48-4.el8_6.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | 2.48-5.el8_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | 2.48-5.el8_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.48-10.el9_7.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.48-10.el9_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.48-10.el9_7.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.48-10.el9_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 2.48-9.el9_2.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — | 2.48-9.el9_4.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 2.48-9.el9_6.1 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — | 412.86.202608241157-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 413.92.202606160406-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 414.92.202606231112-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202606030318-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 416.94.202606051757-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | 417.94.202606250942-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 418.94.202606051320-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — | 4.19.9.6.202606031700-0 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371080 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371069 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791788287 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791970484 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459707 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459711 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459759 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1789029076 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791966259 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790598593 | Patch available | CNA |
| Red Hat | Cost Management 4 | — | 1780946239 | Patch available | CNA |
| Red Hat | Cost Management 4 | — | 1783539156 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1780681984 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1782352950 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1782352919 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1782353093 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1782352847 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1778101579 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1778156756 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1782159791 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1782166952 | Patch available | CNA |
| Red Hat | Red Hat Hardened Images | — | 2.78-1.1.hum1 | Patch available | CNA |
| Red Hat | Red Hat Insights proxy 1.5 | — | 1780420428 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703542 | Patch available | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 | — | 1778056267 | Patch available | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 | — | 1778056233 | Patch available | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 | — | 1778056245 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1779798159 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1779798164 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1779798165 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1779798222 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241211 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787135742 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241260 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 2.69-7.el10_1.1 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 2.69-7.el10_2.1 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 2.69-7.el10_0.1 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.48-6.el8_10.1 Patch available CNA
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.48-4.el8_6.1 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.48-4.el8_6.1 Patch available CNA
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2.48-5.el8_8.1 Patch available CNA
- Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.48-5.el8_8.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.48-10.el9_7.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.48-10.el9_8.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.48-10.el9_7.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.48-10.el9_8.1 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.48-9.el9_2.1 Patch available CNA
- Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 2.48-9.el9_4.1 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 2.48-9.el9_6.1 Patch available CNA
- Red Hat OpenShift Container Platform 4.12 VendorRed Hat Affected — Fixed in 412.86.202608241157-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202606160406-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 414.92.202606231112-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202606030318-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 416.94.202606051757-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in 417.94.202606250942-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202606051320-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.19 VendorRed Hat Affected — Fixed in 4.19.9.6.202606031700-0 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371080 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371069 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791788287 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791970484 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459707 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459711 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459759 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1789029076 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791966259 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790598593 Patch available CNA
- Cost Management 4 VendorRed Hat Affected — Fixed in 1780946239 Patch available CNA
- Cost Management 4 VendorRed Hat Affected — Fixed in 1783539156 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1780681984 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1782352950 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1782352919 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1782353093 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1782352847 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1778101579 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1778156756 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1782159791 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1782166952 Patch available CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in 2.78-1.1.hum1 Patch available CNA
- Red Hat Insights proxy 1.5 VendorRed Hat Affected — Fixed in 1780420428 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703542 Patch available CNA
- Red Hat OpenShift distributed tracing 3.9.3 VendorRed Hat Affected — Fixed in 1778056267 Patch available CNA
- Red Hat OpenShift distributed tracing 3.9.3 VendorRed Hat Affected — Fixed in 1778056233 Patch available CNA
- Red Hat OpenShift distributed tracing 3.9.3 VendorRed Hat Affected — Fixed in 1778056245 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1779798159 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1779798164 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1779798165 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1779798222 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241211 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787135742 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241260 Patch available CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:libcap_project:libcap:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Libcap Project |
| cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
- cpe:2.3:a:libcap_project:libcap:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Libcap Project
- cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
Remediation
Red Hat 42 advisories
- RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
Show 39 more Red Hat advisories
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:74674 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
- RHSA-2026:59831 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.12.97 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202608241157-0
- RHSA-2026:58981 Released 2026-08-24 · Red Hat rating CriticalRed Hat Update Infrastructure 5.3 Technology Preview security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
- RHSA-2026:39981 Released 2026-07-15 · Red Hat rating ImportantCost Management Metrics Operator Update
- Cost Management 4 registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator
- RHSA-2026:34098 Released 2026-07-09 · Red Hat rating CriticalOpenShift Container Platform 4.17.55 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202606250942-0, rhcos-ppc64le-417.94.202606250942-0, rhcos-s390x-417.94.202606250942-0 +1
- RHSA-2026:28887 Released 2026-07-01 · Red Hat rating CriticalOpenShift Container Platform 4.14.68 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202606231112-0, rhcos-ppc64le-414.92.202606231112-0, rhcos-s390x-414.92.202606231112-0 +1
- RHSA-2026:30089 Released 2026-06-25 · Red Hat rating CriticalRed Hat AI Inference Server 3.3.5 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:30088 Released 2026-06-25 · Red Hat rating CriticalRed Hat AI Inference Server 3.3.5 (ROCm)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:30087 Released 2026-06-25 · Red Hat rating CriticalRed Hat AI Inference Server 3.3.5 (Spyre)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
- RHSA-2026:30078 Released 2026-06-25 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.3.5 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:26542 Released 2026-06-25 · Red Hat rating CriticalOpenShift Container Platform 4.13.68 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202606160406-0
- RHSA-2026:29197 Released 2026-06-24 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:27998 Released 2026-06-22 · Red Hat rating ImportantCost Management Metrics Operator Update
- Cost Management 4 registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator
- RHSA-2026:25044 Released 2026-06-18 · Red Hat rating ImportantOpenShift Container Platform 4.16.64 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202606051757-0, rhcos-ppc64le-416.94.202606051757-0, rhcos-s390x-416.94.202606051757-0 +1
- RHSA-2026:25181 Released 2026-06-17 · Red Hat rating CriticalOpenShift Container Platform 4.18.44 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202606051320-0, rhcos-ppc64le-418.94.202606051320-0, rhcos-s390x-418.94.202606051320-0 +1
- RHSA-2026:23233 Released 2026-06-11 · Red Hat rating ImportantOpenShift Container Platform 4.15.65 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202606030318-0, rhcos-ppc64le-415.92.202606030318-0, rhcos-s390x-415.92.202606030318-0 +1
- RHSA-2026:25096 Released 2026-06-10 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:23245 Released 2026-06-10 · Red Hat rating ImportantOpenShift Container Platform 4.19.33 bug fix and security update
- Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202606031700-0, rhcos-ppc64le-4.19.9.6.202606031700-0, rhcos-s390x-4.19.9.6.202606031700-0 +1
- RHSA-2026:24346 Released 2026-06-08 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) libcap-2.48-4.el8_6.1, libcap-devel-2.48-4.el8_6.1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) libcap-2.48-4.el8_6.1, libcap-devel-2.48-4.el8_6.1
- RHSA-2026:22957 Released 2026-06-03 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) libcap-2.48-5.el8_8.1, libcap-devel-2.48-5.el8_8.1
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) libcap-2.48-5.el8_8.1, libcap-devel-2.48-5.el8_8.1
- RHSA-2026:22634 Released 2026-06-02 · Red Hat rating ImportantInsights proxy Container Image
- Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
- RHSA-2026:21275 Released 2026-05-27 · Red Hat rating CriticalRed Hat Update Infrastructure 5.1 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
- RHSA-2026:21254 Released 2026-05-27 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) libcap-devel-2.48-9.el9_2.1
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) libcap-2.48-9.el9_2.1
- RHSA-2026:20595 Released 2026-05-26 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) libcap-devel-2.48-9.el9_4.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) libcap-2.48-9.el9_4.1
- RHSA-2026:19458 Released 2026-05-20 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) libcap-devel-2.48-9.el9_6.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) libcap-2.48-9.el9_6.1
- RHSA-2026:19456 Released 2026-05-20 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) libcap-devel-2.69-7.el10_0.1
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) libcap-2.69-7.el10_0.1
- RHSA-2026:19346 Released 2026-05-19 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream (v. 9) libcap-devel-2.48-10.el9_8.1
- Red Hat Enterprise Linux BaseOS (v. 9) libcap-2.48-10.el9_8.1
- RHSA-2026:19130 Released 2026-05-19 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream (v. 10) libcap-devel-2.69-7.el10_2.1
- Red Hat Enterprise Linux BaseOS (v. 10) libcap-2.69-7.el10_2.1
- RHSA-2026:14937 Released 2026-05-07 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:14162 Released 2026-05-06 · Red Hat rating ImportantRed Hat build of OpenTelemetry 3.9.3 release
- Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator, registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9
- RHSA-2026:13285 Released 2026-05-04 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux BaseOS (v. 8) libcap-2.48-6.el8_10.1, libcap-devel-2.48-6.el8_10.1
- RHSA-2026:12441 Released 2026-04-30 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream (v. 9) libcap-devel-2.48-10.el9_7.1
- Red Hat Enterprise Linux BaseOS (v. 9) libcap-2.48-10.el9_7.1
- RHSA-2026:12423 Released 2026-04-30 · Red Hat rating Importantlibcap security update
- Red Hat Enterprise Linux AppStream (v. 10) libcap-devel-2.69-7.el10_1.1
- Red Hat Enterprise Linux BaseOS (v. 10) libcap-2.69-7.el10_1.1
- RHSA-2026:7473 Released 2026-04-10 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images libcap-2.78-1.1.hum1@aarch64, libcap-2.78-1.1.hum1@src, libcap-2.78-1.1.hum1@x86_64 +4
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat OpenShift Container Platform 4 | Affected | — |
| Cert Manager support for Red Hat OpenShift release 1.17 | Fixed | RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82888 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857 |
| Cert Manager support for Red Hat OpenShift release 1.20 | Fixed | RHSA-2026:72502 |
| Cost Management 4 | Fixed | RHSA-2026:27998, RHSA-2026:39981 |
| Red Hat AI Inference Server 3.2 | Fixed | RHSA-2026:25096 |
| Red Hat AI Inference Server 3.3 | Fixed | RHSA-2026:30078, RHSA-2026:30087, RHSA-2026:30088, RHSA-2026:30089 |
| Red Hat Discovery 2 | Fixed | RHSA-2026:14937, RHSA-2026:29197 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:12423, RHSA-2026:19130 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:12441, RHSA-2026:19346 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:21254 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:19456 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:20595 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:19458 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:12423, RHSA-2026:19130 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:13285 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:12441, RHSA-2026:19346 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:24346 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:22957 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:21254 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:19456 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.4) | Fixed | RHSA-2026:20595 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:19458 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:24346 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:22957 |
| Red Hat Hardened Images | Fixed | RHSA-2026:7473 |
| Red Hat Insights proxy 1.5 | Fixed | RHSA-2026:22634 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:74674 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2026:59831 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2026:26542 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:28887 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:23233 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:25044 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:34098 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:25181 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:23245 |
| Red Hat OpenShift distributed tracing 3.9.3 | Fixed | RHSA-2026:14162 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:21275, RHSA-2026:58981 |
Not affected: 4 products
- Cost Management 4
- Red Hat Hardened Images
- Red Hat OpenShift distributed tracing 3.9.3
- Red Hat Update Infrastructure 5
Timeline
- 2026-10-02 Threatist record created from CVE-2026-4878
- 2026-10-10 Affected versions changed · Red Hat
- 2026-10-10 Fix available: openshift/[email protected], openshift/[email protected], openshift/[email protected] +5 · CNA
- 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
- 2026-10-14 Fix available: cert-manager/cert-manager-istio-csr-rhel9@1791459759, cert-manager/cert-manager-operator-rhel9@1789029076, cert-manager/cert-manager-operator-rhel9@1791788287 +4 · CNA
- 2026-10-14 5 new references · CNA
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
- 2026-10-15 Fix available: cert-manager/cert-manager-operator-bundle@1791966259, cert-manager/cert-manager-operator-bundle@1791970484 · CNA
- 2026-10-15 2 new references · CNA
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
References
Exploit 2
Advisory 47
- RHSA-2026:12423
- RHSA-2026:12441
- RHSA-2026:13285
- RHSA-2026:14162
- RHSA-2026:14937
- RHSA-2026:19130
- RHSA-2026:19346
- RHSA-2026:19456
- RHSA-2026:19458
- RHSA-2026:20595
- RHSA-2026:21254
- RHSA-2026:21275
- RHSA-2026:22634
- RHSA-2026:22957
- RHSA-2026:23233
- RHSA-2026:23245
- RHSA-2026:24346
- RHSA-2026:25044
- RHSA-2026:25096
- RHSA-2026:25181
- RHSA-2026:26542
- RHSA-2026:27998
- RHSA-2026:28887
- RHSA-2026:29197
- RHSA-2026:30078
- RHSA-2026:30087
- RHSA-2026:30088
- RHSA-2026:30089
- RHSA-2026:34098
- RHSA-2026:39981
- RHSA-2026:58981
- RHSA-2026:59831
- RHSA-2026:72502
- RHSA-2026:74674
- RHSA-2026:7473
- RHSA-2026:82304
- RHSA-2026:82322
- RHSA-2026:82347
- RHSA-2026:82354
- RHSA-2026:82372
- RHSA-2026:82857
- RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-4878
- RHBZ#2451615
- http://www.openwall.com/lists/oss-security/2026/04/07/14
- http://www.openwall.com/lists/oss-security/2026/04/07/4
- http://www.openwall.com/lists/oss-security/2026/04/08/9
More Red Hat Enterprise Linux vulnerabilities
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
- TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
Sources
- CVE-2026-4878 · CVE Program
- CVE-2026-4878 · NVD
- FIRST EPSS
- CVE-2026-4878 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences