Read the docs
TI-2026-21585 Aliases CVE-2026-27135

nghttp2 Denial of service: Assertion failure due to the missing state validation

Priority MEDIUM 40CWE-617Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-617.

Summary

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00823 57th percentileScored 2026-11-07
Fix Fixed nghttp2 (nghttp2): 1.68.1Red Hat: 55 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
nghttp2nghttp2before 1.68.11.68.1Patch availableCNA
  • nghttp2 Vendornghttp2 Affected before 1.68.1 Fixed in 1.68.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:nghttp2:nghttp2:*:*:*:*:*:*:*:*before 1.68.1Vulnerablenghttp2
  • cpe:2.3:a:nghttp2:nghttp2:*:*:*:*:*:*:*:* Versions before 1.68.1 Vulnerable ·nghttp2

Remediation

  • Fix · CNA nghttp2 (nghttp2) Fixed in 1.68.1

Red Hat 55 advisories

  • RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
  • RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
Show 52 more Red Hat advisories
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:77939 Released 2026-10-07 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images libnghttp2-1.69.0-6.1.hum1@aarch64, libnghttp2-1.69.0-6.1.hum1@s390x, libnghttp2-1.69.0-6.1.hum1@x86_64 +13
  • RHSA-2026:27200 Released 2026-06-22 · Red Hat rating Important
    Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update
    • Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-httpd-2.4.62-13.el7jbcs, jbcs-httpd24-httpd-devel-2.4.62-13.el7jbcs, jbcs-httpd24-httpd-manual-2.4.62-13.el7jbcs +10
    • Red Hat JBoss Core Services on RHEL 8 jbcs-httpd24-httpd-2.4.62-13.el8jbcs, jbcs-httpd24-httpd-devel-2.4.62-13.el8jbcs, jbcs-httpd24-httpd-manual-2.4.62-13.el8jbcs +10
  • RHSA-2026:27201 Released 2026-06-22 · Red Hat rating Important
    Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update
    • Red Hat JBoss Core Services 2.4.62.SP4
  • RHSA-2026:25096 Released 2026-06-10 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:21695 Released 2026-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.12.91 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202605271418-0
  • RHSA-2026:21690 Released 2026-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.13.67 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202605271328-0
  • RHSA-2026:21656 Released 2026-06-03 · Red Hat rating Important
    OpenShift Container Platform 4.18.43 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202605260517-0, rhcos-ppc64le-418.94.202605260517-0, rhcos-s390x-418.94.202605260517-0 +1
  • RHSA-2026:20087 Released 2026-05-29 · Red Hat rating Important
    OpenShift Container Platform 4.16.63 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202605200242-0, rhcos-ppc64le-416.94.202605200242-0, rhcos-s390x-416.94.202605200242-0 +1
  • RHSA-2026:20040 Released 2026-05-27 · Red Hat rating Important
    OpenShift Container Platform 4.19.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202605201155-0, rhcos-ppc64le-4.19.9.6.202605201155-0, rhcos-s390x-4.19.9.6.202605201155-0 +1
  • RHSA-2026:19725 Released 2026-05-20 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:19724 Released 2026-05-20 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:17596 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202605112123-0, rhcos-ppc64le-417.94.202605112123-0, rhcos-s390x-417.94.202605112123-0 +1
  • RHSA-2026:14773 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.15.64 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202605060220-0, rhcos-ppc64le-415.92.202605060220-0, rhcos-s390x-415.92.202605060220-0 +1
  • RHSA-2026:15087 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.14.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202605060243-0, rhcos-ppc64le-414.92.202605060243-0, rhcos-s390x-414.92.202605060243-0 +1
  • RHSA-2026:16174 Released 2026-05-12 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (Spyre)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
  • RHSA-2026:16030 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:16009 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (ROCm)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:16008 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:14937 Released 2026-05-07 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2026:13812 Released 2026-05-05 · Red Hat rating Important
    updated RHEL-8 based Middleware Containers container images
    • Middleware Containers for OpenShift rhpam-7/rhpam-businesscentral-monitoring-rhel8, rhpam-7/rhpam-businesscentral-rhel8, rhpam-7/rhpam-controller-rhel8 +4
  • RHSA-2026:11768 Released 2026-04-29 · Red Hat rating Important
    Red Hat Update Infrastructure 5.2 Technology Preview security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
  • RHSA-2026:10065 Released 2026-04-23 · Red Hat rating Important
    Red Hat Update Infrastructure 5.1 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
  • RHSA-2026:9874 Released 2026-04-22 · Red Hat rating Important
    nodejs:20 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) nodejs-1:20.20.2-2.module+el9.6.0+24220+c44c288d.aarch64::nodejs:20, nodejs-1:20.20.2-2.module+el9.6.0+24220+c44c288d.ppc64le::nodejs:20, nodejs-1:20.20.2-2.module+el9.6.0+24220+c44c288d.s390x::nodejs:20 +20
  • RHSA-2026:9832 Released 2026-04-22 · Red Hat rating Important
    Insights proxy Container Image
    • Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
  • RHSA-2026:9711 Released 2026-04-22 · Red Hat rating Important
    nodejs:20 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) nodejs-1:20.20.2-2.module+el9.4.0+24216+64c58546.aarch64::nodejs:20, nodejs-1:20.20.2-2.module+el9.4.0+24216+64c58546.ppc64le::nodejs:20, nodejs-1:20.20.2-2.module+el9.4.0+24216+64c58546.s390x::nodejs:20 +20
  • RHSA-2026:8868 Released 2026-04-20 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) libnghttp2-devel-1.64.0-2.el10_0.1
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) libnghttp2-1.64.0-2.el10_0.1, nghttp2-1.64.0-2.el10_0.1
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) nghttp2-1.64.0-2.el10_0.1
  • RHSA-2026:8548 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) libnghttp2-devel-1.43.0-6.el9_6.1, nghttp2-1.43.0-6.el9_6.1
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) libnghttp2-1.43.0-6.el9_6.1, nghttp2-1.43.0-6.el9_6.1
  • RHSA-2026:8547 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) libnghttp2-devel-1.43.0-5.el9_4.4, nghttp2-1.43.0-5.el9_4.4
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) libnghttp2-1.43.0-5.el9_4.4, nghttp2-1.43.0-5.el9_4.4
  • RHSA-2026:8545 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) libnghttp2-1.43.0-5.el9_2.4, nghttp2-1.43.0-5.el9_2.4
  • RHSA-2026:8546 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) libnghttp2-1.43.0-5.el9_0.4, nghttp2-1.43.0-5.el9_0.4
  • RHSA-2026:8538 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) libnghttp2-1.33.0-4.el8_6.3, nghttp2-1.33.0-4.el8_6.3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) libnghttp2-1.33.0-4.el8_6.3, nghttp2-1.33.0-4.el8_6.3
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) libnghttp2-1.33.0-4.el8_6.3, nghttp2-1.33.0-4.el8_6.3
  • RHSA-2026:8540 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) libnghttp2-1.33.0-5.el8_8.2, nghttp2-1.33.0-5.el8_8.2
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) libnghttp2-1.33.0-5.el8_8.2, nghttp2-1.33.0-5.el8_8.2
  • RHSA-2026:8539 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) libnghttp2-1.33.0-4.el8_4.3, nghttp2-1.33.0-4.el8_4.3
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) libnghttp2-1.33.0-4.el8_4.3, nghttp2-1.33.0-4.el8_4.3
  • RHSA-2026:8541 Released 2026-04-16 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) libnghttp2-1.33.0-3.el8_2.4, nghttp2-1.33.0-3.el8_2.4
  • RHSA-2026:8339 Released 2026-04-15 · Red Hat rating Important
    nodejs:20 security update
    • Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:20.20.2-1.module+el8.10.0+24197+1602b452.aarch64::nodejs:20, nodejs-1:20.20.2-1.module+el8.10.0+24197+1602b452.ppc64le::nodejs:20, nodejs-1:20.20.2-1.module+el8.10.0+24197+1602b452.s390x::nodejs:20 +20
  • RHSA-2026:7983 Released 2026-04-14 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) nodejs-1:22.22.2-1.module+el9.6.0+24196+39669d4e.aarch64::nodejs:22, nodejs-1:22.22.2-1.module+el9.6.0+24196+39669d4e.ppc64le::nodejs:22, nodejs-1:22.22.2-1.module+el9.6.0+24196+39669d4e.s390x::nodejs:22 +28
  • RHSA-2026:7896 Released 2026-04-13 · Red Hat rating Important
    nodejs:20 security update
    • Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:20.20.2-1.module+el9.7.0+24193+41b7b572.aarch64::nodejs:20, nodejs-1:20.20.2-1.module+el9.7.0+24193+41b7b572.ppc64le::nodejs:20, nodejs-1:20.20.2-1.module+el9.7.0+24193+41b7b572.s390x::nodejs:20 +20
  • RHSA-2026:7670 Released 2026-04-13 · Red Hat rating Important
    nodejs:24 security update
    • Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:24.14.1-2.module+el8.10.0+24190+49a46c75.aarch64::nodejs:24, nodejs-1:24.14.1-2.module+el8.10.0+24190+49a46c75.ppc64le::nodejs:24, nodejs-1:24.14.1-2.module+el8.10.0+24190+49a46c75.s390x::nodejs:24 +25
  • RHSA-2026:7668 Released 2026-04-13 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS (v. 9) libnghttp2-1.43.0-6.el9_7.1, nghttp2-1.43.0-6.el9_7.1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libnghttp2-devel-1.43.0-6.el9_7.1, nghttp2-1.43.0-6.el9_7.1
  • RHSA-2026:7675 Released 2026-04-13 · Red Hat rating Important
    nodejs24 security update
    • Red Hat Enterprise Linux AppStream (v. 10) nodejs24-1:24.14.1-2.el10_1, nodejs24-devel-1:24.14.1-2.el10_1, nodejs24-docs-1:24.14.1-2.el10_1 +3
  • RHSA-2026:7667 Released 2026-04-13 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux BaseOS (v. 8) libnghttp2-1.33.0-6.el8_10.2, nghttp2-1.33.0-6.el8_10.2
    • Red Hat Enterprise Linux CRB (v. 8) libnghttp2-devel-1.33.0-6.el8_10.2, nghttp2-1.33.0-6.el8_10.2
  • RHSA-2026:7666 Released 2026-04-13 · Red Hat rating Important
    nghttp2 security update
    • Red Hat Enterprise Linux AppStream (v. 10) libnghttp2-devel-1.64.0-2.el10_1.1
    • Red Hat Enterprise Linux BaseOS (v. 10) libnghttp2-1.64.0-2.el10_1.1, nghttp2-1.64.0-2.el10_1.1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) nghttp2-1.64.0-2.el10_1.1
  • RHSA-2026:7350 Released 2026-04-09 · Red Hat rating Important
    nodejs:24 security update
    • Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:24.14.1-2.module+el9.7.0+24166+51c9666b.aarch64::nodejs:24, nodejs-1:24.14.1-2.module+el9.7.0+24166+51c9666b.ppc64le::nodejs:24, nodejs-1:24.14.1-2.module+el9.7.0+24166+51c9666b.s390x::nodejs:24 +25
  • RHSA-2026:7310 Released 2026-04-09 · Red Hat rating Important
    nodejs22 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) nodejs-1:22.22.2-2.el10_0, nodejs-devel-1:22.22.2-2.el10_0, nodejs-docs-1:22.22.2-2.el10_0 +4
  • RHSA-2026:7302 Released 2026-04-09 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:22.22.2-1.module+el9.7.0+24157+8ddb2461.aarch64::nodejs:22, nodejs-1:22.22.2-1.module+el9.7.0+24157+8ddb2461.ppc64le::nodejs:22, nodejs-1:22.22.2-1.module+el9.7.0+24157+8ddb2461.s390x::nodejs:22 +28
  • RHSA-2026:7123 Released 2026-04-08 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:22.22.2-1.module+el8.10.0+24148+847b6786.aarch64::nodejs:22, nodejs-1:22.22.2-1.module+el8.10.0+24148+847b6786.ppc64le::nodejs:22, nodejs-1:22.22.2-1.module+el8.10.0+24148+847b6786.s390x::nodejs:22 +28
  • RHSA-2026:7080 Released 2026-04-08 · Red Hat rating Important
    nodejs22 security update
    • Red Hat Enterprise Linux AppStream (v. 10) nodejs-1:22.22.2-1.el10_1, nodejs-devel-1:22.22.2-1.el10_1, nodejs-docs-1:22.22.2-1.el10_1 +4
  • RHSA-2026:6190 Released 2026-03-30 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images libnghttp2-1.68.1-1.hum1@aarch64, libnghttp2-1.68.1-1.hum1@x86_64, libnghttp2-devel-1.68.1-1.hum1@aarch64 +8

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82888
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857
Middleware Containers for OpenShiftFixed RHSA-2026:13812
Red Hat AI Inference Server 3.2Fixed RHSA-2026:19724, RHSA-2026:19725, RHSA-2026:25096
Red Hat AI Inference Server 3.3Fixed RHSA-2026:16008, RHSA-2026:16009, RHSA-2026:16030, RHSA-2026:16174
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2026:8547
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:8548
Red Hat Discovery 2Fixed RHSA-2026:14937
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:7080, RHSA-2026:7666, RHSA-2026:7675
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:7123, RHSA-2026:7670, RHSA-2026:8339
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:7302, RHSA-2026:7350, RHSA-2026:7896
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:7310, RHSA-2026:8868
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:9711
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:7983, RHSA-2026:9874
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:7666
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:7667
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:7668
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2026:8541
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:8539
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:8538
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2026:8538
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:8540
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2026:8546
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:8545
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:8868
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2026:8547
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:8548
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:8539
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2026:8538
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:8540
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:7667
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:7666
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:7668
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:8868
Red Hat Hardened ImagesFixed RHSA-2026:6190, RHSA-2026:77939
Red Hat Insights proxy 1.5Fixed RHSA-2026:9832
Red Hat JBoss Core Services 2.4.62.SP4Fixed RHSA-2026:27201
Red Hat JBoss Core Services on RHEL 7 ServerFixed RHSA-2026:27200
Red Hat JBoss Core Services on RHEL 8Fixed RHSA-2026:27200
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:21695
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:21690
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:15087
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:14773
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:20087
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:17596
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:21656
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:20040
Red Hat Update Infrastructure 5Fixed RHSA-2026:10065, RHSA-2026:11768
Not affected: 3 products
  • Middleware Containers for OpenShift
  • Red Hat JBoss Core Services on RHEL 7 Server
  • Red Hat JBoss Core Services on RHEL 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-27135
  2. 2026-10-09 Fix available: RHSA-2026:27201 · Red Hat
  3. 2026-10-11 Fix available: Red Hat JBoss Core Services 2.4.62.SP4 · Red Hat
  4. 2026-10-12 Fix available: RHSA-2026:77939 · Red Hat
  5. 2026-10-12 Affected versions changed · Red Hat
  6. 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
  7. 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
  8. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  9. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  10. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  11. 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
  12. 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
  13. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat

References

Patch 2

Advisory 1

  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-18006 Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec CVSS 3.1HIGH 7.5
  • TI-2024-18758 Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage CVSS 3.1MEDIUM 5.3
  • TI-2018-15818 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation… CVSS 3.1HIGH 7.5
  • TI-2015-07121 The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified… CVSS 3.0CRITICAL 10.0
  • TI-2020-08954 Denial of service in nghttp2 CVSS 3.1HIGH 7.5
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences