openshift_container_platform vulnerabilities
CVEs whose affected-version data names the openshift_container_platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
530 CVEsRSS
CVE-2026-98775Medium· 5.5kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure (CVE-2026-98775)
A flaw was found in the Linux kernel's Nitro Enclaves driver. An error-handling defect during enclave creation allows memory to be accessed after it has already been freed. A local attacker could exploit this use-after-free condition to ca…
CVE-2026-98779Low· 1.9kernel: drm/amdgpu: fix ACP MFD device leak on init failure (CVE-2026-98779)
A flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. During Audio CoProcessor (ACP) hardware initialization, child multi-function devices are not properly released if a power domain attachment fails or a hardware reset times out…
CVE-2026-98780Low· 1.9kernel: drm/amdgpu: fix IP instance memory leak on kobject add failure (CVE-2026-98780)
A flaw was found in the Linux kernel's AMD GPU driver. When registering hardware discovery entries within the sysfs (system filesystem) interface, the driver fails to release allocated memory if a kernel object fails to register. An unexpe…
CVE-2026-98785Medium· 4.7kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (CVE-2026-98785)
A flaw was found in the Linux kernel's AMD display driver. During power management suspend operations under low memory conditions, the driver fails to handle memory allocation failures and retains an invalid null state. When the system sub…
CVE-2026-98789Medium· 4.4kernel: bpf: Fix objects stuck in free_by_rcu_ttrace (CVE-2026-98789)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) memory allocator. When releasing memory, objects queued while a delayed cleanup cycle is already in progress can fail to be reclaimed. A local user can exploit this vulner…
CVE-2026-98786Medium· 4.7kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation (CVE-2026-98786)
A flaw was found in the Linux kernel's AMD GPU display driver. During DisplayPort Multi-Stream Transport (MST) display disconnection, a race condition can cause the driver to access display data structures without verifying that they remai…
CVE-2026-98790Medium· 4.7kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task() (CVE-2026-98790)
A flaw was found in the Linux kernel's performance monitoring subsystem. A race condition occurs during process execution when cleaning up performance events while a task event is still pending. A local user could exploit this flaw to trig…
CVE-2026-98794Medium· 6.5kernel: ipvs: filter some flags received in the backup server (CVE-2026-98794)
A flaw was found in the Linux kernel's IPVS (IP Virtual Server) subsystem. An attacker on the local network can send synchronization messages containing invalid connection flag combinations to an IPVS backup server. This lack of validation…
CVE-2026-98792Medium· 5.9kernel: netfilter: flowtable: generalize pending status bit (CVE-2026-98792)
A flaw was found in the Linux kernel's netfilter flowtable component. This flaw allows an attacker to cause a denial of service (DoS) by crashing the operating system. A race condition exists between the connection cleanup worker and hardw…
CVE-2026-98791Medium· 4.4kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference (CVE-2026-98791)
A flaw was found in the Linux kernel's Mellanox network driver (mlx5e). A local user can exploit this vulnerability to cause a denial of service (DoS) through a system crash. During the teardown of an AF_XDP (eXpress Data Path) transmit qu…
CVE-2026-98793Medium· 4.4kernel: netfilter: bpf: reject invalid NAT manipulation types (CVE-2026-98793)
A flaw was found in the Linux kernel's netfilter subsystem. Missing validation of Network Address Translation (NAT) manipulation types in BPF connection tracking helpers allows a local user with permissions to run BPF programs to trigger a…
CVE-2026-98799Medium· 4.4kernel: bpf: Skip detached progs in trampoline images that are still in use (CVE-2026-98799)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. When a BPF program attached to a trampoline is detached while another task is paused in an active routine, the kernel can prematurely release the detached progr…
CVE-2026-98798Medium· 4.4kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open (CVE-2026-98798)
A flaw was found in the Linux kernel's Broadcom GENET network driver. A privileged local user could trigger a Denial of Service (DoS) by configuring receive coalescing settings on a network interface that has not yet been opened. This flaw…
CVE-2026-98797Medium· 5.5kernel: net: cap skb->queue_mapping when the tx queue is picked (CVE-2026-98797)
A flaw was found in the Linux kernel. A local user with network administration privileges in a network namespace can cause a Denial of Service (DoS) by triggering an out-of-bounds memory read. When redirecting packets between network inter…
CVE-2026-98802Low· 3.7kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA (CVE-2026-98802)
A flaw was found in the Linux kernel. When processing IPv6 segment routing (seg6) headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer i…
CVE-2026-98807Medium· 4.4kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events (CVE-2026-98807)
A flaw was found in the Linux kernel's Mellanox ConnectX (mlx5) network driver. It allows a privileged local user to cause a Denial of Service (DoS) via an out-of-bounds memory read. When processing Link Aggregation (LAG) events, the drive…
CVE-2026-98805High· 7.4kernel: tipc: prevent GCM nonce reuse on peer key changes (CVE-2026-98805)
A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A network attacker who intercepts cluster communications can achieve information disclosure and alter transmitted data. This vulnerability occurs…
CVE-2026-98810Medium· 6.1kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() (CVE-2026-98810)
A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory by transmitting specially crafted network packets. This issue occurs because …
CVE-2026-98811Low· 3.3kernel: net/sched: cls_api: reclaim an empty proto on the error path (CVE-2026-98811)
A flaw was found in the Linux kernel's network traffic control classifier subsystem. A local attacker with network administration privileges could exploit a race condition by submitting concurrent filter addition requests that fail during …
CVE-2026-98809Medium· 4.4kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (CVE-2026-98809)
A flaw was found in the Linux kernel's Bluetooth subsystem. When unregistering a Bluetooth device, pending synchronous commands are processed without reaching the controller, causing each queued request to wait for a full timeout. A local …
CVE-2026-98814Medium· 4.4kernel: nvme: fix command effects log lifetime for multipath heads (CVE-2026-98814)
A flaw was found in the Linux kernel's Non-Volatile Memory Express (NVMe) driver. A local attacker can cause a denial of service (DoS) or potentially escalate privileges by exploiting a use-after-free flaw. This issue occurs when an input/…
CVE-2026-98816Medium· 4.1kernel: bpf: Fix overflow of jump offset in constant blinding (CVE-2026-98816)
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. An integer overflow occurs in the constant blinding mechanism when calculating backward jump offsets during BPF program hardening. A local attacker capable of l…
CVE-2026-98820Medium· 5.5kernel: blk-mq: set RQF_USE_SCHED when the operation is known (CVE-2026-98820)
A flaw was found in the Linux kernel's block multi-queue (blk-mq) subsystem. When cached input/output (I/O) requests originally allocated for passthrough commands are reused for standard read or write operations, scheduler flags are not pr…
CVE-2026-98822Medium· 4.3kernel: wifi: mac80211: prevent AP VLAN tx from other interfaces (CVE-2026-98822)
A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw can lead to information disclosure across network boundaries when transmitting frames across Access Point (AP) virtual local area networks (VLANs). Due to improp…
CVE-2026-98821Medium· 4.7kernel: block: reject polled dio with user integrity metadata (CVE-2026-98821)
A flaw was found in the Linux kernel's block layer. A local user could exploit this vulnerability to cause a denial of service (DoS) by initiating polled direct I/O operations combined with user integrity metadata. Because the kernel impro…
CVE-2026-98819Medium· 4.4kernel: Bluetooth: btintel: validate DDC record lengths (CVE-2026-98819)
A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration (DDC) records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundarie…
CVE-2026-98824Medium· 5.3kernel: wifi: mac80211: validate TX status rate metadata (CVE-2026-98824)
A flaw was found in the Linux kernel's mac80211 wireless subsystem. When processing transmission (TX) status reports, the subsystem fails to properly validate rate metadata before using it to index internal rate tables. Malformed metadata …
CVE-2026-98823Medium· 5.3kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership (CVE-2026-98823)
A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This issue allows an adjacent attacker within wireless range to cause a Denial of Service (DoS) by crashing the system. During a channel switch, the kernel improperly mana…
CVE-2026-98828Medium· 6.2kernel: wifi: ath9k: reject short WMI command responses (CVE-2026-98828)
A flaw was found in the Linux kernel's ath9k wireless driver. When handling Wireless Module Interface (WMI) command responses, the driver copies data into a response buffer without verifying that the received message is sufficiently long. …
CVE-2026-98827Medium· 5.3kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (CVE-2026-98827)
A flaw was found in the Linux kernel's ath9k_htc wireless network driver. An attacker transmitting large network packets can trigger a Denial of Service (DoS) or system crash through memory corruption. This issue occurs because the driver …