Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-86567	Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap	8.8 High	Oct 14, 2026
CVE-2026-100236	Dpdk: dpdk: heap out-of-bounds read/write in gso header copy	8.6 High	Oct 14, 2026
CVE-2026-86565	Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write	8.2 High	Oct 14, 2026
CVE-2026-86563	Dpdk: dpdk: double offset bug in vhost log mapping calculation	7.8 High	Oct 14, 2026
CVE-2026-86562	Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)	7.8 High	Oct 14, 2026
CVE-2026-86561	Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup	6.5 Medium	Oct 14, 2026
CVE-2026-93683	Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou	6.4 Medium	Oct 14, 2026
CVE-2026-109968	Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file	5.5 Medium	Oct 14, 2026
CVE-2026-104795	The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for…	8.8 High	Oct 14, 2026
CVE-2026-109971	Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool	4.7 Medium	Oct 14, 2026
CVE-2026-109970	Clevis: clevis: pkcs#11 token pin written to world-readable file	4.7 Medium	Oct 14, 2026
CVE-2026-109969	Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask	4.7 Medium	Oct 14, 2026
CVE-2026-110036	Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices	3.3 Low	Oct 13, 2026
CVE-2026-109976	Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection	4.7 Medium	Oct 13, 2026
CVE-2026-75888	A flaw was found in the OpenShift console	7.7 High	Oct 12, 2026
CVE-2026-107935	Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose	9.3 Critical	Oct 9, 2026
CVE-2026-89091	Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution	8.8 High	Oct 8, 2026
CVE-2026-107565	Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption	5.1 Medium	Oct 8, 2026
CVE-2026-93017	The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core…	7.7 High	Oct 8, 2026
CVE-2026-107176	Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret	6.8 Medium	Oct 7, 2026
CVE-2026-107161	Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients	7.5 High	Oct 7, 2026
CVE-2026-107174	A flaw was found in source-to-image	6.4 Medium	Oct 7, 2026
CVE-2026-80048	Sssd: sssd-kcm: local denial of service via excessive memory preallocation	Not rated	Oct 6, 2026
CVE-2026-104045	Sssd: sssd: denial of service via race condition in autofs responder	4.7 Medium	Oct 6, 2026
CVE-2026-104046	Sssd: sssd: denial of service via incomplete identity provider authentication requests	6.2 Medium	Oct 6, 2026

Other Red Hat products