openshift 5.0 Schwachstellen (CVE)

Für openshift 5.0 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

7.3Hoch

CVE-2026-71226 vor 3 Monaten

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Stephan Muelle libkcapi; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

7.3Hoch

CVE-2026-12080 vor 3 Monaten

Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat OpenShift Container Platform 4.22; Red Hat Red Hat OpenShift Container Platform 5.0; Red Hat Red Hat Enterprise Linux 10

A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass o…