Known vulnerabilities in Red Hat Hardened Images
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-123876 | Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation | 4.4 Medium | Nov 6, 2026 |
| CVE-2026-120749 | Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus | 6.2 Medium | Nov 6, 2026 |
| CVE-2026-111253 | Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transaction | 6.6 Medium | Nov 5, 2026 |
| CVE-2026-123151 | Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail | Not rated | Nov 5, 2026 |
| CVE-2026-121997 | Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch | 8.1 High | Nov 5, 2026 |
| CVE-2026-121996 | Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length | 8.2 High | Nov 5, 2026 |
| CVE-2026-121995 | Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail | 7.5 High | Nov 5, 2026 |
| CVE-2026-121994 | Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length | 8.8 High | Nov 5, 2026 |
| CVE-2026-115456 | Gcc: out-of-bounds read in std::from_chars | 3.7 Low | Oct 30, 2026 |
| CVE-2026-115455 | Gcc: stack overflow in std::bitset on libstdc++ | 6.5 Medium | Oct 30, 2026 |
| CVE-2026-114691 | Gcc: integer wrap in `std | 5.9 Medium | Oct 30, 2026 |
| CVE-2026-114690 | Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std | 6.2 Medium | Oct 30, 2026 |
| CVE-2026-85498 | Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow | 3.5 Low | Oct 29, 2026 |
| CVE-2026-115207 | Patch: filename validation bypass in reversal fallback allows file creation outside the working directory | 5.5 Medium | Oct 22, 2026 |
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-85518 | Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition | 6.1 Medium | Oct 21, 2026 |
| CVE-2026-114236 | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | 3.3 Low | Oct 21, 2026 |
| CVE-2026-92824 | Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-92822 | Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-92823 | Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-16460 | Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization | 7.4 High | Oct 19, 2026 |
| CVE-2026-16487 | A flaw was found in bootc when operating with the default containers signature policy | 8.1 High | Oct 19, 2026 |
| CVE-2026-17591 | Libarchive: libarchive: use-after-free via aliased mac metadata copy | 3.6 Low | Oct 16, 2026 |
| CVE-2026-85977 | Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding | 5.3 Medium | Oct 16, 2026 |
| CVE-2026-85231 | Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding | 6.5 Medium | Oct 16, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433