Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-46323	In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()…	7.8 High	Jun 9, 2026
CVE-2026-46316	In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache…	9.3 Critical	Jun 9, 2026
CVE-2025-10263	Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,…	9.1 Critical	Jun 9, 2026
CVE-2026-3238	A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller	7.5 High	Jun 8, 2026
CVE-2026-11332	Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution	7.8 High	Jun 5, 2026
CVE-2026-41567	Moby is an open source container framework	7.2 High	Jun 5, 2026
CVE-2026-50589	In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some…	5.3 Medium	Jun 4, 2026
CVE-2026-10843	A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS	7.2 High	Jun 4, 2026
CVE-2026-10805	Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend	6.7 Medium	Jun 4, 2026
CVE-2026-44393	An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0	7.4 High	Jun 4, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-1784	The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy	8.8 High	Jun 2, 2026
CVE-2026-5419	Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal	3.7 Low	Jun 1, 2026
CVE-2024-52011	launch-editor allows users to open files with line numbers in editor from Node.js	7.5 High	Jun 1, 2026
CVE-2026-46243	In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego…	7.1 High	Jun 1, 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Medium	Jun 1, 2026
CVE-2026-10533	A flaw was found in OpenShift Container Platform	5.0 Medium	Jun 1, 2026
CVE-2026-42965	Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation	7.7 High	May 29, 2026
CVE-2026-46579	A flaw was found in the OpenShift Router	7.4 High	May 29, 2026
CVE-2026-4408	Samba: remote code execution in samr	9.0 Critical	May 28, 2026
CVE-2026-44604	Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command	7.0 High	May 28, 2026
CVE-2026-1933	Samba: missing access check on reparse point operations	7.1 High	May 27, 2026
CVE-2026-45984	In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data…	7.8 High	May 27, 2026
CVE-2026-2340	Samba: vfs_worm does not block directory modification	6.5 Medium	May 27, 2026
CVE-2026-3012	Samba: group policy certificate enrollment uses http:// without validation	8.0 High	May 27, 2026

Other Red Hat products