Known vulnerabilities in Red Hat OpenShift Container Platform 4
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-123876 | Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation | 4.4 Medium | Nov 6, 2026 |
| CVE-2026-123037 | Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902) | 6.7 Medium | Nov 6, 2026 |
| CVE-2026-82976 | Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret | 7.1 High | Nov 3, 2026 |
| CVE-2026-120831 | Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service | 6.5 Medium | Nov 3, 2026 |
| CVE-2026-120830 | Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure | 7.4 High | Nov 3, 2026 |
| CVE-2026-120194 | Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step | 7.5 High | Oct 31, 2026 |
| CVE-2026-115456 | Gcc: out-of-bounds read in std::from_chars | 3.7 Low | Oct 30, 2026 |
| CVE-2026-115455 | Gcc: stack overflow in std::bitset on libstdc++ | 6.5 Medium | Oct 30, 2026 |
| CVE-2026-114691 | Gcc: integer wrap in `std | 5.9 Medium | Oct 30, 2026 |
| CVE-2026-114690 | Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std | 6.2 Medium | Oct 30, 2026 |
| CVE-2026-118593 | Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099) | 5.9 Medium | Oct 30, 2026 |
| CVE-2026-92092 | A flaw was found in openshift-ansible | 7.4 High | Oct 29, 2026 |
| CVE-2026-93009 | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-93010 | Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-93006 | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content | 6.8 Medium | Oct 29, 2026 |
| CVE-2026-93007 | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-93011 | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-93008 | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations | 6.8 Medium | Oct 29, 2026 |
| CVE-2026-85498 | Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow | 3.5 Low | Oct 29, 2026 |
| CVE-2026-109411 | Samba: access control bypass via vfs_ceph_rgw case-insensitive open | 8.1 High | Oct 28, 2026 |
| CVE-2026-116497 | Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon | 5.5 Medium | Oct 26, 2026 |
| CVE-2026-115449 | Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest | 3.5 Low | Oct 22, 2026 |
| CVE-2026-115424 | A flaw was found in the OpenShift client oc | 5.5 Medium | Oct 22, 2026 |
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-114236 | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | 3.3 Low | Oct 21, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430