Red Hat Red Hat OpenShift Container Platform 4

• CVE-2026-109970 Medium 4.7 Clevis: clevis: pkcs#11 token pin written to world-readable file 0.1%
• CVE-2026-109969 Medium 4.7 Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask 0.1%
• CVE-2026-110036 Low 3.3 Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices 0.2%
• CVE-2026-109976 Medium 4.7 Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection 0.1%
• CVE-2026-107935 Critical 9.3 Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose 0.2%
• CVE-2026-107565 Medium 5.1 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption 0.1%
• CVE-2026-107176 Medium 6.8 Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret 0.3%
• CVE-2026-107161 High 7.5 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients 0.4%
• CVE-2026-107174 Medium 6.4 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction 0.3%
• CVE-2026-80048 Medium 5.5 Sssd: sssd-kcm: local denial of service via excessive memory preallocation 0.2%
• CVE-2026-104045 Medium 4.7 Sssd: sssd: denial of service via race condition in autofs responder 0.1%
• CVE-2026-104046 Medium 6.2 Sssd: sssd: denial of service via incomplete identity provider authentication requests 0.2%
• CVE-2026-104048 Medium 6.8 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation 0.3%
• CVE-2026-104047 Medium 5.3 Sssd: sssd: information disclosure via query injection in entra id lookups 0.1%
• CVE-2026-76061 Medium 5.5 Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass 0.2%
• CVE-2026-88252 Medium 4.7 Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion 0.1%
• CVE-2026-104044 Medium 6.2 Sssd: sssd: denial of service via crafted passkey kerberos authentication request 0.1%
• CVE-2026-104043 Medium 5.5 Sssd: sssd: denial of service via undersized packet parsing in nss responder <0.1%
• CVE-2026-104042 Medium 5.5 Sssd: sssd: denial of service via out-of-bounds read in pam responder 0.2%
• CVE-2026-104041 Medium 5.5 Sssd: sssd: denial of service via unbounded negative cache growth 0.1%
• CVE-2026-104040 Medium 4.4 Sssd: sssd: information disclosure via odata injection in entra id lookups 0.1%
• CVE-2026-104039 Medium 4.7 Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder 0.1%
• CVE-2026-104038 Medium 5.9 Sssd: sssd: denial of service via missing sid extension in certificate mapping 0.3%
• CVE-2026-104037 Medium 5.5 Sssd: sssd: denial of service via packet length underflow in autofs responder 0.1%
• CVE-2026-92821 Medium 6.8 Sssd: sssd: access control bypass via premature ldap access rule evaluation 0.3%
• CVE-2026-104036 Medium 5.8 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin <0.1%
• CVE-2026-104035 Medium 5.5 Sssd: sssd: denial of service via memory exhaustion in kcm responder <0.1%
• CVE-2026-104034 Medium 4.7 Sssd: sssd: denial of service via use-after-free in kcm ticket renewal <0.1%
• CVE-2026-104033 Medium 5.4 Sssd: sssd: access control bypass via improper ldap shadow expiration check 0.2%
• CVE-2026-104032 Medium 5.5 Sssd: sssd: denial of service via unprivileged autofs cache invalidation <0.1%
• CVE-2026-104031 Medium 5.5 Sssd: sssd: denial of service via memory exhaustion in autofs responder <0.1%
• CVE-2026-104029 Low 3.3 Sssd: sssd: denial of service via out-of-bounds read in autofs responder 0.1%
• CVE-2026-104030 Medium 5.5 Sssd: sssd: denial of service via out-of-bounds read during passkey parsing 0.1%
• CVE-2026-101295 High 7.3 Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction 0.1%
• CVE-2026-93834 High 8.8 Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape 0.4%
• CVE-2026-75886 High 7.2 Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding 0.3%
• CVE-2026-90462 Medium 5.4 Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization 0.2%
• CVE-2026-94640 High 7.5 Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service 0.6%
• CVE-2026-95619 High 7.7 Gcc: libstdc++ integer overflow in `new` operator 0.4%
• CVE-2026-95508 High 7.4 Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu 0.6%
• CVE-2026-75939 High 7.4 Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed 0.4%
• CVE-2026-92574 High 8.8 Cri-o: cri-o checkpoint restore bypasses destination security context 0.7%
• CVE-2026-15801 High 8.0 Cri-o: cri-o: insufficient validation during container checkpoint restore 0.5%
• CVE-2026-81627 High 8.2 Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram 0.2%
• CVE-2026-76781 Medium 5.5 Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute 0.2%
• CVE-2026-42784 High 7.4 Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion 0.3%
• CVE-2025-11395 Medium 5.5 Podman: arbitrary file write when importing oci archive 0.4%
• CVE-2026-79699 Medium 4.4 Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory 0.2%
• CVE-2026-79705 Medium 4.5 Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers 0.4%
• CVE-2026-90996 Medium 4.0 Sssd: sssd: denial of service in nss responder via crafted zero-length requests 0.1%