{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.12.91 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container\nPlatform 4.12.\n\nRed Hat Product Security has rated this update as having a security impact\nof  Low. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.12.91. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHBA-2026:21694\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nSecurity Fix(es):\n\nNone\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:21695",
        "url": "https://access.redhat.com/errata/RHSA-2026:21695"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2392605",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
      },
      {
        "category": "external",
        "summary": "2447085",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
      },
      {
        "category": "external",
        "summary": "2448754",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
      },
      {
        "category": "external",
        "summary": "2454714",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
      },
      {
        "category": "external",
        "summary": "2467771",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467771"
      },
      {
        "category": "external",
        "summary": "2477015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21695.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.12.91 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-07-18T21:17:11+00:00",
      "generator": {
        "date": "2026-07-18T21:17:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:21695",
      "initial_release_date": "2026-06-04T17:00:30+00:00",
      "revision_history": [
        {
          "date": "2026-06-04T17:00:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-04T17:00:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-18T21:17:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.12",
                  "product_id": "8Base-RHOSE-4.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.12::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-412.86.202605271418-0",
                "product": {
                  "name": "rhcos-x86_64-412.86.202605271418-0",
                  "product_id": "rhcos-x86_64-412.86.202605271418-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@412.86.202605271418?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-412.86.202605271418-0 as a component of Red Hat OpenShift Container Platform 4.12",
          "product_id": "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        },
        "product_reference": "rhcos-x86_64-412.86.202605271418-0",
        "relates_to_product_reference": "8Base-RHOSE-4.12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-9714",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2025-09-02T13:03:56.452000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2392605"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libxstl/libxml2. The \u0027exsltDynMapFunction\u0027 function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling \u0027dyn:map()\u0027, leading to stack exhaustion and a local denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No evidence was found for arbitrary memory corruption through this flaw, limiting its impact to Availability only, and reducing its severity to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "RHBZ#2392605",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-9714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148",
          "url": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148"
        }
      ],
      "release_date": "2025-09-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T17:00:30+00:00",
          "details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21695"
        },
        {
          "category": "workaround",
          "details": "The impact of this flaw may be reduced by setting strict resource limits to the stack size of processes at the operational system level. This can be achieved either through the \u0027ulimit\u0027 shell built-in or the \u0027limits.conf\u0027 file.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c"
    },
    {
      "cve": "CVE-2026-3497",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-03-12T19:01:37.007806+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447085"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT: This vulnerability affects the OpenSSH GSSAPI delta as implemented in Red Hat Enterprise Linux and OpenShift Container Platform. An unauthenticated attacker could send a specially crafted GSSAPI message during key exchange, leading to the use of uninitialized variables and potentially undefined behavior. The severity of the impact is dependent on compiler hardening configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3497"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447085",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3497",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3497"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497"
        },
        {
          "category": "external",
          "summary": "https://ubuntu.com/security/CVE-2026-3497",
          "url": "https://ubuntu.com/security/CVE-2026-3497"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/03/12/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/03/12/3"
        }
      ],
      "release_date": "2026-03-12T18:27:44.917000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T17:00:30+00:00",
          "details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21695"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable GSSAPI key exchange in the OpenSSH server configuration. This prevents the server from processing GSSAPI messages, eliminating the vulnerability\u0027s attack surface.\n\nEdit `/etc/ssh/sshd_config` and add or modify the line:\n```\nGSSAPIKeyExchange no\n```\n\nAfter saving the changes, restart the `sshd` service for the mitigation to take effect. This action will prevent users from authenticating via GSSAPI.\n\n```\n# systemctl restart sshd\n```",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables"
    },
    {
      "cve": "CVE-2026-27135",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-03-18T19:02:13.823002+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448754"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27135"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448754",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27135",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
          "url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
          "url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
        }
      ],
      "release_date": "2026-03-18T17:59:02.045000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T17:00:30+00:00",
          "details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21695"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination"
    },
    {
      "cve": "CVE-2026-35535",
      "cwe": {
        "id": "CWE-272",
        "name": "Least Privilege Violation"
      },
      "discovery_date": "2026-04-03T03:01:03.124541+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454714"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454714",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "https://bugs.debian.org/1130593",
          "url": "https://bugs.debian.org/1130593"
        },
        {
          "category": "external",
          "summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
          "url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
        },
        {
          "category": "external",
          "summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
          "url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
        },
        {
          "category": "external",
          "summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
          "url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
        }
      ],
      "release_date": "2026-04-03T02:21:33.584000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T17:00:30+00:00",
          "details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21695"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
    },
    {
      "cve": "CVE-2026-43284",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-07T15:56:04.044000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The xfrm-ESP variant requires unprivileged user or network namespace creation, while the RxRPC variant depends on the rxrpc module being available on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s xfrm-ESP and RxRPC subsystems to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43284"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467771"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43284",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43284"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43284",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43284"
        },
        {
          "category": "external",
          "summary": "https://dirtyfrag.io/",
          "url": "https://dirtyfrag.io/"
        }
      ],
      "release_date": "2026-05-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T17:00:30+00:00",
          "details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21695"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    },
    {
      "cve": "CVE-2026-43503",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
        }
      ],
      "release_date": "2026-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T17:00:30+00:00",
          "details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21695"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
    },
    {
      "cve": "CVE-2026-46300",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-13T13:28:21.270000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
        }
      ],
      "release_date": "2026-05-13T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T17:00:30+00:00",
          "details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:3701cb0c9cd5c3123709a9ec33af15b4c6fe414f62b316a27cbbc07f5857a869\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21695"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202605271418-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.20.24 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.20.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.20.24. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHSA-2026:21701\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nSecurity Fix(es):\n\n* kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:21702",
        "url": "https://access.redhat.com/errata/RHSA-2026:21702"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2477015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21702.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.20.24 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-07-18T21:17:10+00:00",
      "generator": {
        "date": "2026-07-18T21:17:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:21702",
      "initial_release_date": "2026-06-03T16:22:07+00:00",
      "revision_history": [
        {
          "date": "2026-06-03T16:22:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-03T16:22:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-18T21:17:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.20",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.20",
                  "product_id": "9Base-RHOSE-4.20",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.20::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-4.20.9.6.202605270908-0",
                "product": {
                  "name": "rhcos-aarch64-4.20.9.6.202605270908-0",
                  "product_id": "rhcos-aarch64-4.20.9.6.202605270908-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.20.9.6.202605270908?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-4.20.9.6.202605270908-0",
                "product": {
                  "name": "rhcos-ppc64le-4.20.9.6.202605270908-0",
                  "product_id": "rhcos-ppc64le-4.20.9.6.202605270908-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.20.9.6.202605270908?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-4.20.9.6.202605270908-0",
                "product": {
                  "name": "rhcos-s390x-4.20.9.6.202605270908-0",
                  "product_id": "rhcos-s390x-4.20.9.6.202605270908-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.20.9.6.202605270908?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-4.20.9.6.202605270908-0",
                "product": {
                  "name": "rhcos-x86_64-4.20.9.6.202605270908-0",
                  "product_id": "rhcos-x86_64-4.20.9.6.202605270908-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.20.9.6.202605270908?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-4.20.9.6.202605270908-0 as a component of Red Hat OpenShift Container Platform 4.20",
          "product_id": "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0"
        },
        "product_reference": "rhcos-aarch64-4.20.9.6.202605270908-0",
        "relates_to_product_reference": "9Base-RHOSE-4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-4.20.9.6.202605270908-0 as a component of Red Hat OpenShift Container Platform 4.20",
          "product_id": "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0"
        },
        "product_reference": "rhcos-ppc64le-4.20.9.6.202605270908-0",
        "relates_to_product_reference": "9Base-RHOSE-4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-4.20.9.6.202605270908-0 as a component of Red Hat OpenShift Container Platform 4.20",
          "product_id": "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0"
        },
        "product_reference": "rhcos-s390x-4.20.9.6.202605270908-0",
        "relates_to_product_reference": "9Base-RHOSE-4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-4.20.9.6.202605270908-0 as a component of Red Hat OpenShift Container Platform 4.20",
          "product_id": "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
        },
        "product_reference": "rhcos-x86_64-4.20.9.6.202605270908-0",
        "relates_to_product_reference": "9Base-RHOSE-4.20"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-43503",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
        }
      ],
      "release_date": "2026-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:22:07+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:27c93d3b308e9c3694dd7e448d71f61e4e3c033ad8905031736bd1912c1f41fc\n\n      (For s390x architecture)\n      The image digest is sha256:588f4ba99d745826e618e72a66b8f81f671f7714263a5fc5e830e1f66942ca55\n\n      (For ppc64le architecture)\n      The image digest is sha256:b96960dd4a50eae41f43ed029dfbdbc53737f72ef7c4d0a062d0fd2802875bd3\n\n      (For aarch64 architecture)\n      The image digest is sha256:9cbee5f3e59dc3431ea30d2e337668f8abed821be651936afa99e6767cf39108\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21702"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
    },
    {
      "cve": "CVE-2026-46300",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-13T13:28:21.270000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
        }
      ],
      "release_date": "2026-05-13T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:22:07+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:27c93d3b308e9c3694dd7e448d71f61e4e3c033ad8905031736bd1912c1f41fc\n\n      (For s390x architecture)\n      The image digest is sha256:588f4ba99d745826e618e72a66b8f81f671f7714263a5fc5e830e1f66942ca55\n\n      (For ppc64le architecture)\n      The image digest is sha256:b96960dd4a50eae41f43ed029dfbdbc53737f72ef7c4d0a062d0fd2802875bd3\n\n      (For aarch64 architecture)\n      The image digest is sha256:9cbee5f3e59dc3431ea30d2e337668f8abed821be651936afa99e6767cf39108\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21702"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    },
    {
      "cve": "CVE-2026-46333",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "discovery_date": "2026-05-15T08:27:21.590000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477802"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully terminates. Successful exploitation may lead to the disclosure of sensitive data such as SSH host private keys or /etc/shadow contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Read root-owned files as an unprivileged user",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Linux kernel that allows a local unprivileged attacker to read root-owned files. The vulnerability arises from a race condition during process termination, enabling a brief window where sensitive data, such as SSH host private keys or /etc/shadow contents, can be disclosed. This could lead to unauthorized access to sensitive information on affected Red Hat Enterprise Linux systems.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits and prevents target binaries from opening privileged files, breaking the exploit chain entirely. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to access root-owned files already within the container, not host or cross-pod resources. In practice, containers rarely contain sensitive root-owned files that are not already accessible to the pod user through normal means.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
          "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477802",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-004",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-004"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46333",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path",
          "url": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path"
        },
        {
          "category": "external",
          "summary": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a",
          "url": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a"
        }
      ],
      "release_date": "2026-05-15T05:55:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:22:07+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:27c93d3b308e9c3694dd7e448d71f61e4e3c033ad8905031736bd1912c1f41fc\n\n      (For s390x architecture)\n      The image digest is sha256:588f4ba99d745826e618e72a66b8f81f671f7714263a5fc5e830e1f66942ca55\n\n      (For ppc64le architecture)\n      The image digest is sha256:b96960dd4a50eae41f43ed029dfbdbc53737f72ef7c4d0a062d0fd2802875bd3\n\n      (For aarch64 architecture)\n      The image digest is sha256:9cbee5f3e59dc3431ea30d2e337668f8abed821be651936afa99e6767cf39108\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:21702"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202605270908-0",
            "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202605270908-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Read root-owned files as an unprivileged user"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.15.65 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.15.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.15.65. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:23232\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nSecurity Fix(es):\n\n* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n* jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)\n* jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)\n* rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035)\n* kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)\n* kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:23233",
        "url": "https://access.redhat.com/errata/RHSA-2026:23233"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2451615",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
      },
      {
        "category": "external",
        "summary": "2454714",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
      },
      {
        "category": "external",
        "summary": "2458077",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
      },
      {
        "category": "external",
        "summary": "2458084",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
      },
      {
        "category": "external",
        "summary": "2458898",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
      },
      {
        "category": "external",
        "summary": "2467771",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467771"
      },
      {
        "category": "external",
        "summary": "2477015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23233.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.15.65 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-07-26T14:13:47+00:00",
      "generator": {
        "date": "2026-07-26T14:13:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:23233",
      "initial_release_date": "2026-06-11T07:54:20+00:00",
      "revision_history": [
        {
          "date": "2026-06-11T07:54:20+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-11T07:54:20+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-26T14:13:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.15",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.15",
                  "product_id": "9Base-RHOSE-4.15",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.15::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-415.92.202606030318-0",
                "product": {
                  "name": "rhcos-aarch64-415.92.202606030318-0",
                  "product_id": "rhcos-aarch64-415.92.202606030318-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202606030318?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-415.92.202606030318-0",
                "product": {
                  "name": "rhcos-ppc64le-415.92.202606030318-0",
                  "product_id": "rhcos-ppc64le-415.92.202606030318-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202606030318?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-415.92.202606030318-0",
                "product": {
                  "name": "rhcos-s390x-415.92.202606030318-0",
                  "product_id": "rhcos-s390x-415.92.202606030318-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202606030318?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-415.92.202606030318-0",
                "product": {
                  "name": "rhcos-x86_64-415.92.202606030318-0",
                  "product_id": "rhcos-x86_64-415.92.202606030318-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202606030318?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-415.92.202606030318-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0"
        },
        "product_reference": "rhcos-aarch64-415.92.202606030318-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-415.92.202606030318-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0"
        },
        "product_reference": "rhcos-ppc64le-415.92.202606030318-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-415.92.202606030318-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0"
        },
        "product_reference": "rhcos-s390x-415.92.202606030318-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-415.92.202606030318-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        },
        "product_reference": "rhcos-x86_64-415.92.202606030318-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Ali Raza"
          ]
        }
      ],
      "cve": "CVE-2026-4878",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-03-26T06:56:21.213270+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451615"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451615",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        }
      ],
      "release_date": "2026-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
    },
    {
      "cve": "CVE-2026-35535",
      "cwe": {
        "id": "CWE-272",
        "name": "Least Privilege Violation"
      },
      "discovery_date": "2026-04-03T03:01:03.124541+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454714"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454714",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "https://bugs.debian.org/1130593",
          "url": "https://bugs.debian.org/1130593"
        },
        {
          "category": "external",
          "summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
          "url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
        },
        {
          "category": "external",
          "summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
          "url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
        },
        {
          "category": "external",
          "summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
          "url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
        }
      ],
      "release_date": "2026-04-03T02:21:33.584000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
    },
    {
      "cve": "CVE-2026-39979",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-13T23:01:01.219840+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458077"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the `jv_parse_sized` function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the error message generated by the parser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply malformed JSON from a non-NUL-terminated buffer to an application using the `jv_parse_sized` function. This allows the attacker to trigger the out-of-bounds read, causing an application crash and potentially disclosing memory with no other security impact. As this issue affects the libjq library, it is more likely to be exposed to untrusted input. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458077",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f",
          "url": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p"
        }
      ],
      "release_date": "2026-04-13T22:18:56.252000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, manually ensure that every buffer is NUL-terminated before passing it to the \u0027jv_parse_sized\u0027 function.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers"
    },
    {
      "cve": "CVE-2026-40164",
      "cwe": {
        "id": "CWE-341",
        "name": "Predictable from Observable State"
      },
      "discovery_date": "2026-04-14T00:01:04.003115+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458084"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command-line JSON processor. A remote attacker could exploit this vulnerability by providing a specially crafted JSON object. This object leverages a weakness in jq\u0027s hashing algorithm, which uses a hardcoded, publicly known seed. By crafting the JSON object to cause hash collisions, an attacker can degrade the performance of JSON object hash table operations, leading to significant CPU exhaustion and a denial of service (DoS) for systems processing the malicious JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Denial of Service via crafted JSON object causing hash collisions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458084",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784",
          "url": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29"
        }
      ],
      "release_date": "2026-04-13T23:40:12.693000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: jq: Denial of Service via crafted JSON object causing hash collisions"
    },
    {
      "cve": "CVE-2026-41035",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "discovery_date": "2026-04-16T08:00:54.200357+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458898"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in rsync that allows a remote attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability is present when rsync is used with extended attributes enabled via the `-X` or `--xattrs` option, which is not a default configuration. Exploitation requires the victim to explicitly enable this feature.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458898",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41035",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/issues/871",
          "url": "https://github.com/RsyncProject/rsync/issues/871"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/releases",
          "url": "https://github.com/RsyncProject/rsync/releases"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/16/2",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/16/2"
        }
      ],
      "release_date": "2026-04-16T06:53:05.237000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid using the -X or --xattrs options with rsync if extended attribute handling is not essential for your operations. Disabling these options prevents the vulnerable code path from being exercised. This may impact functionality that relies on extended attributes.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling"
    },
    {
      "cve": "CVE-2026-43284",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-07T15:56:04.044000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The xfrm-ESP variant requires unprivileged user or network namespace creation, while the RxRPC variant depends on the rxrpc module being available on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s xfrm-ESP and RxRPC subsystems to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43284"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467771"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43284",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43284"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43284",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43284"
        },
        {
          "category": "external",
          "summary": "https://dirtyfrag.io/",
          "url": "https://dirtyfrag.io/"
        }
      ],
      "release_date": "2026-05-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    },
    {
      "cve": "CVE-2026-43503",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
        }
      ],
      "release_date": "2026-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
    },
    {
      "cve": "CVE-2026-46300",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-13T13:28:21.270000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
        }
      ],
      "release_date": "2026-05-13T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T07:54:20+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac\n\n      (For s390x architecture)\n      The image digest is sha256:10bccfc41bb95736b0d6a1a91e3fb1c968771e3f023019abdb7480ac7de1a107\n\n      (For ppc64le architecture)\n      The image digest is sha256:9adfb17a263640a6c55c11fdab9ae0ccb7ac73e421fb674318c17d616c4ae4ad\n\n      (For aarch64 architecture)\n      The image digest is sha256:9f35e9b44efc724d4e44a788808e0192d9710a993a4e0b2f2993a6444201f896\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202606030318-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202606030318-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.21.19 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.21.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.21.19. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:23239\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nSecurity Fix(es):\n\n* kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:23240",
        "url": "https://access.redhat.com/errata/RHSA-2026:23240"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2477015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23240.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.21.19 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-07-18T21:17:44+00:00",
      "generator": {
        "date": "2026-07-18T21:17:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:23240",
      "initial_release_date": "2026-06-11T09:38:21+00:00",
      "revision_history": [
        {
          "date": "2026-06-11T09:38:21+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-11T09:38:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-18T21:17:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.21",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.21",
                  "product_id": "9Base-RHOSE-4.21",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.21::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-4.21.9.6.202606030721-0",
                "product": {
                  "name": "rhcos-aarch64-4.21.9.6.202606030721-0",
                  "product_id": "rhcos-aarch64-4.21.9.6.202606030721-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.21.9.6.202606030721?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-4.21.9.6.202606030721-0",
                "product": {
                  "name": "rhcos-ppc64le-4.21.9.6.202606030721-0",
                  "product_id": "rhcos-ppc64le-4.21.9.6.202606030721-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.21.9.6.202606030721?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-4.21.9.6.202606030721-0",
                "product": {
                  "name": "rhcos-s390x-4.21.9.6.202606030721-0",
                  "product_id": "rhcos-s390x-4.21.9.6.202606030721-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.21.9.6.202606030721?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-4.21.9.6.202606030721-0",
                "product": {
                  "name": "rhcos-x86_64-4.21.9.6.202606030721-0",
                  "product_id": "rhcos-x86_64-4.21.9.6.202606030721-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.21.9.6.202606030721?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-4.21.9.6.202606030721-0 as a component of Red Hat OpenShift Container Platform 4.21",
          "product_id": "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0"
        },
        "product_reference": "rhcos-aarch64-4.21.9.6.202606030721-0",
        "relates_to_product_reference": "9Base-RHOSE-4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-4.21.9.6.202606030721-0 as a component of Red Hat OpenShift Container Platform 4.21",
          "product_id": "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0"
        },
        "product_reference": "rhcos-ppc64le-4.21.9.6.202606030721-0",
        "relates_to_product_reference": "9Base-RHOSE-4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-4.21.9.6.202606030721-0 as a component of Red Hat OpenShift Container Platform 4.21",
          "product_id": "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0"
        },
        "product_reference": "rhcos-s390x-4.21.9.6.202606030721-0",
        "relates_to_product_reference": "9Base-RHOSE-4.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-4.21.9.6.202606030721-0 as a component of Red Hat OpenShift Container Platform 4.21",
          "product_id": "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
        },
        "product_reference": "rhcos-x86_64-4.21.9.6.202606030721-0",
        "relates_to_product_reference": "9Base-RHOSE-4.21"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-43503",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
          "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
          "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
          "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
        }
      ],
      "release_date": "2026-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T09:38:21+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:1417c1970881b2a3b8d4baf2bfed9afc8be016ed82a86a2245fe8c683a82ab33\n\n      (For s390x architecture)\n      The image digest is sha256:713c99f6f70ee1297892c4920860ebbc2dc981e22273bb3a6aace5dcc1e28699\n\n      (For ppc64le architecture)\n      The image digest is sha256:d35c97623e5b5e1c43a4f27de6946831eaf892584dc25f5675cb0a1800dd418e\n\n      (For aarch64 architecture)\n      The image digest is sha256:ff686a31f4e7a8d8a495bd4cbc344d35e9cd6a3c09cbd4dae41e12caf8935c3f\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23240"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
    },
    {
      "cve": "CVE-2026-46300",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-13T13:28:21.270000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
          "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
          "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
          "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
        }
      ],
      "release_date": "2026-05-13T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-11T09:38:21+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:1417c1970881b2a3b8d4baf2bfed9afc8be016ed82a86a2245fe8c683a82ab33\n\n      (For s390x architecture)\n      The image digest is sha256:713c99f6f70ee1297892c4920860ebbc2dc981e22273bb3a6aace5dcc1e28699\n\n      (For ppc64le architecture)\n      The image digest is sha256:d35c97623e5b5e1c43a4f27de6946831eaf892584dc25f5675cb0a1800dd418e\n\n      (For aarch64 architecture)\n      The image digest is sha256:ff686a31f4e7a8d8a495bd4cbc344d35e9cd6a3c09cbd4dae41e12caf8935c3f\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23240"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202606030721-0",
            "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202606030721-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.19.33 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.19.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.19.33. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHSA-2026:23244\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nSecurity Fix(es):\n\n* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n* jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)\n* jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)\n* rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035)\n* kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:23245",
        "url": "https://access.redhat.com/errata/RHSA-2026:23245"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2451615",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
      },
      {
        "category": "external",
        "summary": "2458077",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
      },
      {
        "category": "external",
        "summary": "2458084",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
      },
      {
        "category": "external",
        "summary": "2458898",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
      },
      {
        "category": "external",
        "summary": "2477015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23245.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.19.33 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-07-26T14:13:48+00:00",
      "generator": {
        "date": "2026-07-26T14:13:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:23245",
      "initial_release_date": "2026-06-10T09:19:17+00:00",
      "revision_history": [
        {
          "date": "2026-06-10T09:19:17+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-10T09:19:17+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-26T14:13:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.19",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.19",
                  "product_id": "9Base-RHOSE-4.19",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.19::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-4.19.9.6.202606031700-0",
                "product": {
                  "name": "rhcos-aarch64-4.19.9.6.202606031700-0",
                  "product_id": "rhcos-aarch64-4.19.9.6.202606031700-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606031700?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-4.19.9.6.202606031700-0",
                "product": {
                  "name": "rhcos-ppc64le-4.19.9.6.202606031700-0",
                  "product_id": "rhcos-ppc64le-4.19.9.6.202606031700-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606031700?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-4.19.9.6.202606031700-0",
                "product": {
                  "name": "rhcos-s390x-4.19.9.6.202606031700-0",
                  "product_id": "rhcos-s390x-4.19.9.6.202606031700-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606031700?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-4.19.9.6.202606031700-0",
                "product": {
                  "name": "rhcos-x86_64-4.19.9.6.202606031700-0",
                  "product_id": "rhcos-x86_64-4.19.9.6.202606031700-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606031700?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-4.19.9.6.202606031700-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0"
        },
        "product_reference": "rhcos-aarch64-4.19.9.6.202606031700-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-4.19.9.6.202606031700-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0"
        },
        "product_reference": "rhcos-ppc64le-4.19.9.6.202606031700-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-4.19.9.6.202606031700-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0"
        },
        "product_reference": "rhcos-s390x-4.19.9.6.202606031700-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-4.19.9.6.202606031700-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
        },
        "product_reference": "rhcos-x86_64-4.19.9.6.202606031700-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Ali Raza"
          ]
        }
      ],
      "cve": "CVE-2026-4878",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-03-26T06:56:21.213270+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451615"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451615",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        }
      ],
      "release_date": "2026-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T09:19:17+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:f7c8010c24807273c8b9e77064d4a7089c8fcf6585749d864b55b98176ba745f\n\n      (For s390x architecture)\n      The image digest is sha256:093b7cfbad0f920f6f5668c9edfa120a5fd43ed24c71020464133dab18d4394a\n\n      (For ppc64le architecture)\n      The image digest is sha256:8121257742990c3b7d3b1dc4661f6029cf694a7f5f85d7497a466a019b029b20\n\n      (For aarch64 architecture)\n      The image digest is sha256:d73df62e9d3254daccf3fabc888e4081a67e39048191517292fdf0b60c19c7b5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
    },
    {
      "cve": "CVE-2026-39979",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-13T23:01:01.219840+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458077"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the `jv_parse_sized` function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the error message generated by the parser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply malformed JSON from a non-NUL-terminated buffer to an application using the `jv_parse_sized` function. This allows the attacker to trigger the out-of-bounds read, causing an application crash and potentially disclosing memory with no other security impact. As this issue affects the libjq library, it is more likely to be exposed to untrusted input. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458077",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f",
          "url": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p"
        }
      ],
      "release_date": "2026-04-13T22:18:56.252000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T09:19:17+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:f7c8010c24807273c8b9e77064d4a7089c8fcf6585749d864b55b98176ba745f\n\n      (For s390x architecture)\n      The image digest is sha256:093b7cfbad0f920f6f5668c9edfa120a5fd43ed24c71020464133dab18d4394a\n\n      (For ppc64le architecture)\n      The image digest is sha256:8121257742990c3b7d3b1dc4661f6029cf694a7f5f85d7497a466a019b029b20\n\n      (For aarch64 architecture)\n      The image digest is sha256:d73df62e9d3254daccf3fabc888e4081a67e39048191517292fdf0b60c19c7b5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, manually ensure that every buffer is NUL-terminated before passing it to the \u0027jv_parse_sized\u0027 function.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers"
    },
    {
      "cve": "CVE-2026-40164",
      "cwe": {
        "id": "CWE-341",
        "name": "Predictable from Observable State"
      },
      "discovery_date": "2026-04-14T00:01:04.003115+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458084"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command-line JSON processor. A remote attacker could exploit this vulnerability by providing a specially crafted JSON object. This object leverages a weakness in jq\u0027s hashing algorithm, which uses a hardcoded, publicly known seed. By crafting the JSON object to cause hash collisions, an attacker can degrade the performance of JSON object hash table operations, leading to significant CPU exhaustion and a denial of service (DoS) for systems processing the malicious JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Denial of Service via crafted JSON object causing hash collisions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458084",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784",
          "url": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29"
        }
      ],
      "release_date": "2026-04-13T23:40:12.693000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T09:19:17+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:f7c8010c24807273c8b9e77064d4a7089c8fcf6585749d864b55b98176ba745f\n\n      (For s390x architecture)\n      The image digest is sha256:093b7cfbad0f920f6f5668c9edfa120a5fd43ed24c71020464133dab18d4394a\n\n      (For ppc64le architecture)\n      The image digest is sha256:8121257742990c3b7d3b1dc4661f6029cf694a7f5f85d7497a466a019b029b20\n\n      (For aarch64 architecture)\n      The image digest is sha256:d73df62e9d3254daccf3fabc888e4081a67e39048191517292fdf0b60c19c7b5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: jq: Denial of Service via crafted JSON object causing hash collisions"
    },
    {
      "cve": "CVE-2026-41035",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "discovery_date": "2026-04-16T08:00:54.200357+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458898"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in rsync that allows a remote attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability is present when rsync is used with extended attributes enabled via the `-X` or `--xattrs` option, which is not a default configuration. Exploitation requires the victim to explicitly enable this feature.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458898",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41035",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/issues/871",
          "url": "https://github.com/RsyncProject/rsync/issues/871"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/releases",
          "url": "https://github.com/RsyncProject/rsync/releases"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/16/2",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/16/2"
        }
      ],
      "release_date": "2026-04-16T06:53:05.237000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T09:19:17+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:f7c8010c24807273c8b9e77064d4a7089c8fcf6585749d864b55b98176ba745f\n\n      (For s390x architecture)\n      The image digest is sha256:093b7cfbad0f920f6f5668c9edfa120a5fd43ed24c71020464133dab18d4394a\n\n      (For ppc64le architecture)\n      The image digest is sha256:8121257742990c3b7d3b1dc4661f6029cf694a7f5f85d7497a466a019b029b20\n\n      (For aarch64 architecture)\n      The image digest is sha256:d73df62e9d3254daccf3fabc888e4081a67e39048191517292fdf0b60c19c7b5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid using the -X or --xattrs options with rsync if extended attribute handling is not essential for your operations. Disabling these options prevents the vulnerable code path from being exercised. This may impact functionality that relies on extended attributes.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling"
    },
    {
      "cve": "CVE-2026-43503",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
        }
      ],
      "release_date": "2026-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T09:19:17+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:f7c8010c24807273c8b9e77064d4a7089c8fcf6585749d864b55b98176ba745f\n\n      (For s390x architecture)\n      The image digest is sha256:093b7cfbad0f920f6f5668c9edfa120a5fd43ed24c71020464133dab18d4394a\n\n      (For ppc64le architecture)\n      The image digest is sha256:8121257742990c3b7d3b1dc4661f6029cf694a7f5f85d7497a466a019b029b20\n\n      (For aarch64 architecture)\n      The image digest is sha256:d73df62e9d3254daccf3fabc888e4081a67e39048191517292fdf0b60c19c7b5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
    },
    {
      "cve": "CVE-2026-46300",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-13T13:28:21.270000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
        }
      ],
      "release_date": "2026-05-13T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T09:19:17+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:f7c8010c24807273c8b9e77064d4a7089c8fcf6585749d864b55b98176ba745f\n\n      (For s390x architecture)\n      The image digest is sha256:093b7cfbad0f920f6f5668c9edfa120a5fd43ed24c71020464133dab18d4394a\n\n      (For ppc64le architecture)\n      The image digest is sha256:8121257742990c3b7d3b1dc4661f6029cf694a7f5f85d7497a466a019b029b20\n\n      (For aarch64 architecture)\n      The image digest is sha256:d73df62e9d3254daccf3fabc888e4081a67e39048191517292fdf0b60c19c7b5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606031700-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606031700-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel.  This patch module is targeted for kernel-5.14.0-570.17.1.el9_6.\n\nSecurity Fix(es):\n\n* kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)\n\n* kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:23468",
        "url": "https://access.redhat.com/errata/RHSA-2026:23468"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2477015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
      },
      {
        "category": "external",
        "summary": "2477802",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23468.json"
      }
    ],
    "title": "Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update",
    "tracking": {
      "current_release_date": "2026-07-18T21:17:28+00:00",
      "generator": {
        "date": "2026-07-18T21:17:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:23468",
      "initial_release_date": "2026-06-04T21:47:06+00:00",
      "revision_history": [
        {
          "date": "2026-06-04T21:47:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-04T21:47:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-18T21:17:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
                  "product_id": "BaseOS-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:9.6::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
                  "product_id": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1@1-15.el9_6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
                  "product_id": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1@1-6.el9_6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
                  "product_id": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1@1-5.el9_6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
                  "product_id": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1@1-3.el9_6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1@1-15.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debugsource@1-15.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debuginfo@1-15.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1@1-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debugsource@1-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debuginfo@1-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1@1-5.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debugsource@1-5.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debuginfo@1-5.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1@1-3.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debugsource@1-3.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debuginfo@1-3.el9_6?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1@1-15.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debugsource@1-15.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debuginfo@1-15.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1@1-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debugsource@1-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debuginfo@1-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1@1-5.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debugsource@1-5.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debuginfo@1-5.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1@1-3.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debugsource@1-3.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
                  "product_id": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debuginfo@1-3.el9_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src"
        },
        "product_reference": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src"
        },
        "product_reference": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src"
        },
        "product_reference": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src"
        },
        "product_reference": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
          "product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-43503",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
        }
      ],
      "release_date": "2026-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T21:47:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23468"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
    },
    {
      "cve": "CVE-2026-46300",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-13T13:28:21.270000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
        }
      ],
      "release_date": "2026-05-13T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T21:47:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23468"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    },
    {
      "cve": "CVE-2026-46333",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "discovery_date": "2026-05-15T08:27:21.590000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477802"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully terminates. Successful exploitation may lead to the disclosure of sensitive data such as SSH host private keys or /etc/shadow contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Read root-owned files as an unprivileged user",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Linux kernel that allows a local unprivileged attacker to read root-owned files. The vulnerability arises from a race condition during process termination, enabling a brief window where sensitive data, such as SSH host private keys or /etc/shadow contents, can be disclosed. This could lead to unauthorized access to sensitive information on affected Red Hat Enterprise Linux systems.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits and prevents target binaries from opening privileged files, breaking the exploit chain entirely. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to access root-owned files already within the container, not host or cross-pod resources. In practice, containers rarely contain sensitive root-owned files that are not already accessible to the pod user through normal means.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477802",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-004",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-004"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46333",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path",
          "url": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path"
        },
        {
          "category": "external",
          "summary": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a",
          "url": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a"
        }
      ],
      "release_date": "2026-05-15T05:55:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T21:47:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23468"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-15.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-5.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.src",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-3.el9_6.x86_64",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-3.el9_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Read root-owned files as an unprivileged user"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel.  This patch module is targeted for kernel-5.14.0-284.104.1.el9_2.\n\nSecurity Fix(es):\n\n* kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)\n\n* kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:23469",
        "url": "https://access.redhat.com/errata/RHSA-2026:23469"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2477015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
      },
      {
        "category": "external",
        "summary": "2477802",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23469.json"
      }
    ],
    "title": "Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update",
    "tracking": {
      "current_release_date": "2026-07-18T21:17:25+00:00",
      "generator": {
        "date": "2026-07-18T21:17:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:23469",
      "initial_release_date": "2026-06-04T22:08:31+00:00",
      "revision_history": [
        {
          "date": "2026-06-04T22:08:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-04T22:08:31+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-18T21:17:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
                  "product_id": "BaseOS-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:9.2::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
                  "product_id": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_104_1@1-16.el9_2?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
                  "product_id": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1@1-13.el9_2?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
                  "product_id": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1@1-7.el9_2?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
                  "product_id": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1@1-5.el9_2?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
                  "product_id": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1@1-3.el9_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_104_1@1-16.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_104_1-debugsource@1-16.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_104_1-debuginfo@1-16.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1@1-13.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debugsource@1-13.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debuginfo@1-13.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1@1-7.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debugsource@1-7.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debuginfo@1-7.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1@1-5.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debugsource@1-5.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debuginfo@1-5.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1@1-3.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debugsource@1-3.el9_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debuginfo@1-3.el9_2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_104_1@1-16.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_104_1-debugsource@1-16.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_104_1-debuginfo@1-16.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1@1-13.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debugsource@1-13.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debuginfo@1-13.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1@1-7.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debugsource@1-7.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debuginfo@1-7.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1@1-5.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debugsource@1-5.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debuginfo@1-5.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1@1-3.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debugsource@1-3.el9_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
                  "product_id": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debuginfo@1-3.el9_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src"
        },
        "product_reference": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src"
        },
        "product_reference": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src"
        },
        "product_reference": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src"
        },
        "product_reference": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src"
        },
        "product_reference": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
          "product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64",
        "relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-43503",
      "cwe": {
        "id": "CWE-664",
        "name": "Improper Control of a Resource Through its Lifetime"
      },
      "discovery_date": "2026-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480902"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480902",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
        }
      ],
      "release_date": "2026-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T22:08:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23469"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
    },
    {
      "cve": "CVE-2026-46300",
      "cwe": {
        "id": "CWE-123",
        "name": "Write-what-where Condition"
      },
      "discovery_date": "2026-05-13T13:28:21.270000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-003",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
        }
      ],
      "release_date": "2026-05-13T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T22:08:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23469"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
    },
    {
      "cve": "CVE-2026-46333",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "discovery_date": "2026-05-15T08:27:21.590000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477802"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully terminates. Successful exploitation may lead to the disclosure of sensitive data such as SSH host private keys or /etc/shadow contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Read root-owned files as an unprivileged user",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Linux kernel that allows a local unprivileged attacker to read root-owned files. The vulnerability arises from a race condition during process termination, enabling a brief window where sensitive data, such as SSH host private keys or /etc/shadow contents, can be disclosed. This could lead to unauthorized access to sensitive information on affected Red Hat Enterprise Linux systems.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits and prevents target binaries from opening privileged files, breaking the exploit chain entirely. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to access root-owned files already within the container, not host or cross-pod resources. In practice, containers rarely contain sensitive root-owned files that are not already accessible to the pod user through normal means.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
          "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477802",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-004",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-004"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46333",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333"
        },
        {
          "category": "external",
          "summary": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path",
          "url": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path"
        },
        {
          "category": "external",
          "summary": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a",
          "url": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a"
        }
      ],
      "release_date": "2026-05-15T05:55:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-04T22:08:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:23469"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debuginfo-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_104_1-debugsource-0:1-16.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-13.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-7.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-5.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.src",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-3.el9_2.x86_64",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.ppc64le",
            "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-3.el9_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Read root-owned files as an unprivileged user"
    }
  ]
}