Known vulnerabilities in Red Hat OpenShift Container Platform 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-102010	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if	7.0 High	Sep 28, 2026
CVE-2026-93834	Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape	8.8 High	Sep 25, 2026
CVE-2026-90462	Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization	5.4 Medium	Sep 22, 2026
CVE-2026-94640	Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service	7.5 High	Sep 22, 2026
CVE-2026-95619	Gcc: libstdc++ integer overflow in `new` operator	7.7 High	Sep 22, 2026
CVE-2026-95508	Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu	7.4 High	Sep 22, 2026
CVE-2026-75939	Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed	7.4 High	Sep 21, 2026
CVE-2026-92574	Cri-o: cri-o checkpoint restore bypasses destination security context	8.8 High	Sep 21, 2026
CVE-2026-15801	Cri-o: cri-o: insufficient validation during container checkpoint restore	8.0 High	Sep 21, 2026
CVE-2026-81627	Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram	8.2 High	Sep 18, 2026
CVE-2026-76781	Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute	5.5 Medium	Sep 17, 2026
CVE-2026-79705	Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers	4.5 Medium	Sep 15, 2026
CVE-2026-90996	Sssd: sssd: denial of service in nss responder via crafted zero-length requests	4.0 Medium	Sep 14, 2026
CVE-2026-90995	Sssd: sssd: local denial of service due to null pointer dereference in pam responder	5.5 Medium	Sep 14, 2026
CVE-2026-90994	Sssd: sssd: denial of service via malformed pam v1 requests	4.0 Medium	Sep 14, 2026
CVE-2026-90463	Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)	4.0 Medium	Sep 14, 2026
CVE-2026-89329	Device-mapper-multipath: local denial of service via blocking ipc send operations	6.2 Medium	Sep 11, 2026
CVE-2026-84828	Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token	6.5 Medium	Sep 10, 2026
CVE-2026-88265	Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown	5.6 Medium	Sep 10, 2026
CVE-2026-88264	Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs	5.6 Medium	Sep 10, 2026
CVE-2026-84042	Crun: crun: rootful krun with passt executes container payload as host root	7.8 High	Sep 10, 2026
CVE-2026-87853	Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation	7.5 High	Sep 9, 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 High	Sep 8, 2026
CVE-2026-86469	Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	5.3 Medium	Sep 7, 2026
CVE-2026-81666	Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems	6.5 Medium	Sep 4, 2026

Other Red Hat products