openshift_container_platform vulnerabilities
CVEs whose affected-version data names the openshift_container_platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
532 CVEsRSS
CVE-2026-116137Low· 3.7adm-zip: adm-zip: File integrity check bypass via duplicate archive entries (CVE-2026-116137)
A flaw was found in adm-zip. A remote attacker can exploit this issue by providing a specially crafted ZIP archive containing duplicate entries with equivalent path names to bypass validation checks. Consequently, an application may inspec…
CVE-2026-98873Low· 3.3kernel: netfilter: nf_conntrack_expect: zero at allocation time (CVE-2026-98873)
A flaw was found in the Linux kernel's Netfilter connection tracking subsystem. Memory allocated for tracking expected network connections was not properly cleared upon allocation. A local user could exploit this vulnerability by querying …
CVE-2026-98871Medium· 4.1kernel: crypto: ccp - Fix possible deadlock in SEV init failure path (CVE-2026-98871)
A flaw was found in the Linux kernel's AMD Cryptographic Coprocessor (CCP) driver. This vulnerability can lead to a Denial of Service (DoS) due to a deadlock during AMD Secure Encrypted Virtualization (SEV) platform initialization. When an…
CVE-2026-98876Medium· 4.1kernel: host1x: bus: Fix missing ops null check in error teardown (CVE-2026-98876)
A flaw was found in the Linux kernel's Host1x bus driver. This vulnerability can lead to a Denial of Service (DoS) by causing a system crash. During device initialization error handling, the driver attempts to access client operations with…
CVE-2026-98874Low· 2.3kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect (CVE-2026-98874)
A flaw was found in the Linux kernel's iwlwifi driver. A local user can trigger an unintended kernel warning by configuring Wake on Wireless LAN (WoWLAN) and suspending the system while disconnected from a network. On systems configured to…
CVE-2026-98877Medium· 4.7kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed (CVE-2026-98877)
A flaw was found in the Linux kernel's ARM Generic Interrupt Controller (GIC) driver. When virtual interrupt support is enabled on a system lacking an Interrupt Translation Service (ITS) controller, the kernel fails to disable virtual inte…
CVE-2026-115354Medium· 6.5mistune: mistune: Information disclosure via path traversal in Include directive (CVE-2026-115354)
A flaw was found in mistune. When the opt-in Include directive is enabled, insufficient path validation allows an attacker to perform path traversal by supplying relative or absolute file paths. An attacker who submits crafted Markdown inp…
CVE-2026-115351Medium· 4.7mistune: mistune: Information disclosure via CSS injection in figure directive (CVE-2026-115351)
A flaw was found in mistune. A remote attacker with control over markdown content can cause information disclosure by performing Cascading Style Sheets (CSS) injection through the unvalidated figwidth option in the figure directive. By ins…
CVE-2026-115350Medium· 6.1mistune: mistune: Cross-site scripting via Include directive (CVE-2026-115350)
A flaw was found in mistune. An attacker can exploit this vulnerability to conduct stored Cross-Site Scripting (XSS) attacks through the file inclusion directive. By referencing a crafted HTML file, unescaped content is processed as raw ma…
CVE-2026-115424Medium· 5.5oc: oc: Symlink/hardlink target validation bypass in oc image extract allows file write outside destination (CVE-2026-115424)
A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of th…
CVE-2026-112307High· 7.3sqlparse: sqlparse: Arbitrary code execution via unescaped PHP output formatting (CVE-2026-112307)
A flaw was found in sqlparse. The PHP output formatting filter does not properly sanitize dollar-sign sequences when formatting SQL statements into PHP code. An attacker can exploit this vulnerability by supplying crafted SQL input contain…
CVE-2026-98727Medium· 4.1kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known (CVE-2026-98727)
A flaw was found in the Linux kernel's NVMe (Non-Volatile Memory Express) multipath subsystem. The multipath driver inappropriately marks a storage device as supporting zoned storage before confirming its zone configuration. When a device …
CVE-2026-98726Medium· 4.4kernel: nvme-multipath: fix underflow in ANA log bounds checks (CVE-2026-98726)
A flaw was found in the Linux kernel's NVMe (Non-Volatile Memory Express) multipath subsystem. A malicious NVMe device can provide crafted Asymmetric Namespace Access (ANA) log data that triggers an integer underflow during buffer bounds v…
CVE-2026-98732Low· 3.4kernel: Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (CVE-2026-98732)
A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing hardware error events, the driver logs event data as a string without verifying that the received payload is properly null-terminated. A physically proximate at…
CVE-2026-98730Medium· 6.7kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (CVE-2026-98730)
A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. A local user with access to the Bluetooth Host Controller Interface (HCI) user channel can inject an oversized transmission packet. Because the driver fails to validate pa…
CVE-2026-98731Medium· 6.5kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (CVE-2026-98731)
A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. An integer overflow vulnerability exists in the packet reception function when calculating the total length of incoming Bluetooth frames. An adjacent attacker within Bluet…
CVE-2026-98739Medium· 4.4kernel: Bluetooth: RFCOMM: Fix initial port reference race (CVE-2026-98739)
A flaw was found in the Linux kernel's Bluetooth RFCOMM subsystem. A local user could exploit this flaw to cause a Denial of Service (DoS) or potentially escalate privileges. A race condition between concurrent device installation and rele…
CVE-2026-98736Medium· 4.7kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (CVE-2026-98736)
A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs during enhanced Synchronous Connection-Oriented (SCO) link setup due to missing locking when accessing parent connection structures. A local user or adjace…
CVE-2026-98735Medium· 4.7kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (CVE-2026-98735)
A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when outgoing network packets are scheduled while the associated communication channel is concurrently closed and freed during connection teardown. A local…
CVE-2026-98741High· 7.8kernel: ALSA: ua101: reject mismatched capture/playback packet sizes (CVE-2026-98741)
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) UA-101 USB audio driver. The driver does not validate that packet sizes and channel numbers match between capture and playback endpoints during device initiali…
CVE-2026-98747Medium· 4.4kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port() (CVE-2026-98747)
A flaw was found in the Linux kernel's serial core subsystem. This flaw allows a local user with administrative access to cause a Denial of Service (DoS) by crashing the system. The issue occurs during the unregistration of a serial port t…
CVE-2026-98745Medium· 5.5kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (CVE-2026-98745)
A flaw was found in the Linux kernel. A local user can exploit this vulnerability to cause a denial of service (DoS) through a kernel crash. On ARM64 systems that support the Scalable Matrix Extension (SME) but lack the Scalable Vector Ext…
CVE-2026-98744Medium· 5.5kernel: ASoC: codecs: max98363: fix uninitialized stream_config->type (CVE-2026-98744)
A flaw was found in the Linux kernel's MAX98363 audio codec driver. A local user could trigger this vulnerability during audio stream configuration because internal stream parameters are left uninitialized in memory. This issue allows unin…
CVE-2026-98753Medium· 4.7kernel: tty: tty_port: restore TTY_IO_ERROR on activation failure (CVE-2026-98753)
A flaw was found in the Linux kernel's TTY subsystem. A local user can cause a Denial of Service (DoS) by triggering a race condition during terminal device activation and hangup operations. When device activation fails, the kernel fails t…
CVE-2026-98751Medium· 5.5kernel: tty: abort break signalling on hangup (CVE-2026-98751)
A flaw was found in the Linux kernel's terminal (tty) subsystem. A race condition can occur when a terminal hangup interrupts an active break signaling operation, causing the kernel to communicate with a device driver after the device has …
CVE-2026-98752Medium· 4.7kernel: tty: port: fix tty_port_tty_vhangup() race (CVE-2026-98752)
A flaw was found in the Linux kernel's TTY (terminal) subsystem. This vulnerability allows a local user to cause a Denial of Service (DoS) or potentially execute arbitrary code. A race condition during port disconnect and hangup routines a…
CVE-2026-98761Medium· 4.0kernel: usb: typec: tcpm: recover after failure to start the frs ams (CVE-2026-98761)
A flaw was found in the Linux kernel's USB Type-C Port Manager (TCPM). This issue may result in a denial of service (DoS) or unintended power delivery on the affected port. When a USB Type-C cable is disconnected while signaling a Fast Rol…
CVE-2026-98760Medium· 6.1kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (CVE-2026-98760)
A flaw was found in the Linux kernel's TPS6598x USB Type-C driver. When a partner device connects, the driver fails to properly initialize temporary memory structures allocated on the stack before registering the connection. An attacker co…
CVE-2026-98763Medium· 6.2kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (CVE-2026-98763)
A flaw was found in the Linux kernel's USB subsystem. This vulnerability allows an attacker with physical access connecting a malicious USB device, or a local user with privileges to emulate USB hardware, to cause a Denial of Service (DoS)…
CVE-2026-98767Medium· 5.1kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count (CVE-2026-98767)
A flaw was found in the Linux kernel's DWC3 USB gadget driver. When an invalid event buffer count exceeding the buffer size is encountered, the driver fails to acknowledge and clear the hardware interrupt source before returning. This leav…