openshift 5.0 güvenlik açıkları (CVE)

openshift 5.0 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

7.3Yüksek

CVE-2026-71226 3 ay önce

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Stephan Muelle libkcapi; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

7.3Yüksek

CVE-2026-12080 3 ay önce

Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat OpenShift Container Platform 4.22; Red Hat Red Hat OpenShift Container Platform 5.0; Red Hat Red Hat Enterprise Linux 10

A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass o…