openshift_container_platform vulnerabilities
CVEs whose affected-version data names the openshift_container_platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
530 CVEsRSS
CVE-2026-98831Low· 2.3kernel: of/overlay: don't leak fragment references when changeset init fails (CVE-2026-98831)
A flaw was found in the Linux kernel's Device Tree overlay subsystem. This flaw allows a local user to cause a Denial of Service (DoS) through memory exhaustion. When an overlay changeset fails during target or symbol lookup, the kernel fa…
CVE-2026-98829Medium· 6.5kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow (CVE-2026-98829)
A flaw was found in the mac80211 wireless networking subsystem of the Linux kernel. An adjacent attacker, such as a rogue Wi-Fi access point or nearby malicious device, can cause a Denial of Service (DoS) by transmitting a sequence of over…
CVE-2026-98833Medium· 5.5kernel: mtd: core: call _get_device() with the master MTD (CVE-2026-98833)
A flaw was found in the Linux kernel's Memory Technology Device (MTD) subsystem. When accessing certain partitions, the kernel improperly passes a partition device reference instead of the master device structure to the driver callback. A …
CVE-2026-98838Medium· 4.4kernel: vt: skip screen update for DEC alignment test on backgroup consoles (CVE-2026-98838)
A flaw was found in the Linux kernel's virtual terminal subsystem. When handling screen updates for background consoles, the kernel fails to properly verify that a console is active before redrawing it with modified font dimensions. A loca…
CVE-2026-98836Medium· 6.2kernel: ALSA: line6: reject oversized playback packets (CVE-2026-98836)
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) Line 6 USB audio driver. The driver fails to validate the size of playback packets against the allocated memory buffer slice when handling asymmetrical audio c…
CVE-2026-98839Medium· 6.1kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() (CVE-2026-98839)
A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation…
CVE-2026-98846Medium· 5.5kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait (CVE-2026-98846)
A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) subsystem. A race condition can occur when an SCTP socket is shut down concurrently while waiting for a connection, causing an association structure to be f…
CVE-2026-98850Medium· 5.5kernel: net/packet: prevent TX_RING byte count overflow (CVE-2026-98850)
A flaw was found in the Linux kernel's packet socket implementation. An integer overflow occurs in the transmission ring buffer when calculating the total byte count of transmitted frames during a send operation. A local user with raw netw…
CVE-2026-98851Low· 3.3kernel: netfilter: nft_flow_offload: drop flowtable reference on init error path (CVE-2026-98851)
A flaw was found in the Linux kernel's netfilter subsystem. In the flow offload component, an error handling failure during rule initialization fails to release an incremented flow table reference count. A local user with network administr…
CVE-2026-98856Medium· 4.4kernel: kprobes: Skip disarmed probes when checking optkprobe overlap (CVE-2026-98856)
A flaw was found in the Linux kernel's kernel probes (kprobes) tracing subsystem. When arming an optimized probe near an inactive probe, the overlap detection check fails to identify an active jump instruction. A privileged local user can …
CVE-2026-98855Medium· 4.4kernel: of/overlay: put property on deadprops only after changeset add succeeds (CVE-2026-98855)
A flaw was found in the Linux kernel's Device Tree overlay subsystem. When an error occurs while adding a property to a device tree overlay changeset, the allocated property is freed during error cleanup but remains tracked, leading to a s…
CVE-2026-98853High· 7.5kernel: net: gso: limit recursive IP-in-IP segmentation (CVE-2026-98853)
A flaw was found in the Linux kernel's Generic Segmentation Offload (GSO) implementation. When processing deeply nested IP-in-IP packets, recursive segmentation is not properly restricted, which can exhaust kernel stack memory. A remote at…
CVE-2026-98858Medium· 5.5kernel: io_uring: fix task_work add use-after-free with SQPOLL (CVE-2026-98858)
A flaw was found in the Linux kernel's io_uring subsystem. When submission queue polling (SQPOLL) is enabled, a race condition can cause the polling thread to free the ring context while another operation is still accessing it. A local use…
CVE-2026-98857High· 7.5kernel: ipvs: bound LBLCR and LBLC cache growth (CVE-2026-98857)
A flaw was found in the Linux kernel's IP Virtual Server (IPVS) module. The load-balancing cache fails to enforce strict bounds on table growth when entries remain continuously active. A remote attacker can exploit this vulnerability by tr…
CVE-2026-98854Medium· 4.1kernel: of/overlay: only treat a positive changeset id as registered (CVE-2026-98854)
A flaw was found in the Linux kernel's Device Tree overlay subsystem. When applying an overlay fails during identifier allocation, the error cleanup routine incorrectly treats negative error codes as valid identifiers. A local user could t…
CVE-2026-98863Medium· 5.6kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (CVE-2026-98863)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem. When running nested virtual machines, the hypervisor fails to properly re-queue a memory page request if retrieving state pages for a nested guest fails d…
CVE-2026-98862Medium· 4.1kernel: audit: fix exe mark UAF in kill_rules() (CVE-2026-98862)
A flaw was found in the Linux kernel's audit subsystem. A race condition can occur when an audit directory tree is removed while another process evaluates executable audit rules, causing the kernel to access memory after it has been releas…
CVE-2026-98433Low· 2.5kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure (CVE-2026-98433)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for PowerPC architectures. When handling secure virtual machines, a failure during secure memory paging fails to release allocated device memory and intern…
CVE-2026-98441Medium· 4.7⚖ disputedkernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry (CVE-2026-98441)
A flaw was found in the Linux kernel's traffic control conntrack action module (act_ct). An attacker capable of sending network traffic through affected packet filters could trigger a Denial of Service (DoS) or kernel memory corruption. Th…
CVE-2026-98442High· 7.5kernel: net/sched: act_ct: fix helper UAF due to extensions realloc (CVE-2026-98442)
A flaw was found in the Linux kernel's traffic control connection tracking action (act_ct). An attacker capable of sending network traffic handled by the affected system can cause a Denial of Service (DoS) or kernel memory corruption throu…
CVE-2026-98440Medium· 5.6kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction (CVE-2026-98440)
A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) subsystem on ARM64 architectures. In nested virtualization configurations, shadow memory management structures are prematurely freed during shadow page flushes while…
CVE-2026-98443Medium· 4.4⚖ disputedkernel: xfs: fix cursor and pointer handling when recovering iunlink buckets (CVE-2026-98443)
A flaw was found in the Linux kernel's XFS file system. Improper pointer handling during the recovery of unlinked files can cause a use-after-free condition, where the operating system attempts to access memory after it has already been fr…
CVE-2026-98451Low· 3.3⚖ disputedkernel: smb: client: use finish_no_open() for non-regular inodes (CVE-2026-98451)
A flaw was found in the Linux kernel's SMB client. A local user can trigger this issue by opening an existing symbolic link or non-regular file on an SMB mount using file creation flags. Because the client improperly handles non-regular fi…
CVE-2026-98454Medium· 6.5kernel: smb: client: fix create context out-of-bounds reads (CVE-2026-98454)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. A malicious SMB server can exploit this vulnerability by sending malformed create context responses to a connecting system. Because the client fails to properly vali…
CVE-2026-98456Medium· 4.1⚖ disputedkernel: Bluetooth: mgmt: fix race in read_unconf_index_list() (CVE-2026-98456)
A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition in the read_unconf_index_list() function allows a local user to cause an out-of-bounds write during asynchronous controller setup. This issue occurs when device s…
CVE-2026-98462Medium· 4.7kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuse (CVE-2026-98462)
A flaw was found in the Linux kernel's Bluetooth subsystem. Improper reference count management during the reuse and binding of Connected Isochronous Stream (CIS) connections can result in an unbalanced connection hold count. A local attac…
CVE-2026-98466High· 8.2kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CVE-2026-98466)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem on ARM64 platforms. During system initialization in protected virtualization modes, the hypervisor fails to revoke host stage-2 access permissions for per-…
CVE-2026-98472Low· 3.3kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV (CVE-2026-98472)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) AMD SEV (Secure Encrypted Virtualization) implementation. This flaw allows a local user with permissions to manage virtual machines to cause a denial of service (DoS…
CVE-2026-98471Medium· 5.3kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (CVE-2026-98471)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for AMD SEV (Secure Encrypted Virtualization). During intra-host migration of an encrypted virtual machine, the source virtual machine's CPU caches are not…
CVE-2026-98476Medium· 4.7kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() (CVE-2026-98476)
A flaw was found in the Linux kernel's s390 channel I/O (CIO) subsystem. When querying device utility strings, the kernel fails to verify that an associated channel path remains valid after its removal from the registry. A local user could…