Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-92823	Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml	6.2 Medium	Oct 21, 2026
CVE-2026-114038	Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string	5.1 Medium	Oct 21, 2026
CVE-2026-16460	Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization	7.4 High	Oct 19, 2026
CVE-2026-16487	A flaw was found in bootc when operating with the default containers signature policy	8.1 High	Oct 19, 2026
CVE-2026-89096	Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd	5.9 Medium	Oct 16, 2026
CVE-2026-85977	Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding	5.3 Medium	Oct 16, 2026
CVE-2026-85231	Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding	6.5 Medium	Oct 16, 2026
CVE-2026-89098	Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd	5.5 Medium	Oct 16, 2026
CVE-2026-111555	Luksmeta: missing slot-range validation permits out-of-gap device i/o	6.0 Medium	Oct 16, 2026
CVE-2026-104715	Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	7.8 High	Oct 16, 2026
CVE-2026-92982	A flaw was found in Ansible Operator Plugins	8.5 High	Oct 15, 2026
CVE-2026-110927	A flaw was found in OpenSSH	4.3 Medium	Oct 15, 2026
CVE-2026-110924	A flaw was found in OpenSSH	4.8 Medium	Oct 15, 2026
CVE-2026-110926	A flaw was found in OpenSSH	5.3 Medium	Oct 15, 2026
CVE-2026-110925	A flaw was found in OpenSSH	5.4 Medium	Oct 15, 2026
CVE-2026-110923	A flaw was found in OpenSSH	6.5 Medium	Oct 15, 2026
CVE-2026-86849	Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto	6.5 Medium	Oct 14, 2026
CVE-2026-86856	Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver	6.5 Medium	Oct 14, 2026
CVE-2026-86847	Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup	6.5 Medium	Oct 14, 2026
CVE-2026-86846	Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto	6.5 Medium	Oct 14, 2026
CVE-2026-86845	Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup	6.5 Medium	Oct 14, 2026
CVE-2026-86566	Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)	6.5 Medium	Oct 14, 2026
CVE-2026-86848	Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto	8.8 High	Oct 14, 2026
CVE-2026-86567	Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap	8.8 High	Oct 14, 2026
CVE-2026-100236	Dpdk: dpdk: heap out-of-bounds read/write in gso header copy	8.6 High	Oct 14, 2026

Other Red Hat products