openshift_container_platform vulnerabilities
CVEs whose affected-version data names the openshift_container_platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
530 CVEsRSS
CVE-2026-98474Medium· 4.1kernel: s390/pci: Fix missing device lock in zpci_report_status() (CVE-2026-98474)
A flaw was found in the Linux kernel's s390 PCI subsystem. This flaw can lead to a Denial of Service (DoS) due to a missing device lock during PCI (Peripheral Component Interconnect) error recovery. When error recovery status is reported w…
CVE-2026-98468Low· 2.5kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown race (CVE-2026-98468)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for ARM64. This flaw may allow a local user to cause a Denial of Service (DoS) or kernel instability. A race condition occurs when virtual machine stage 2 …
CVE-2026-98475Medium· 5.1kernel: s390/cmf: Fix virtual vs physical address confusion (CVE-2026-98475)
A flaw was found in the Linux kernel's s390 Channel Measurement Facility (CMF). This vulnerability can allow a local user to cause memory corruption or a Denial of Service (DoS) due to confusion between virtual and physical memory addresse…
CVE-2026-98473Low· 1.9kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config (CVE-2026-98473)
A flaw was found in the Linux kernel's s390 Virtual Function I/O Adjunct Processor (VFIO-AP) device driver. A local user with administrative privileges can trigger this issue by removing an AP queue from the host configuration while it rem…
CVE-2026-98479Medium· 6.5kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU (CVE-2026-98479)
A flaw was found in the Linux kernel's iSCSI TCP subsystem. A malicious or compromised iSCSI storage server can cause memory corruption and data integrity loss on a connected client by sending an unexpected Data-In Protocol Data Unit (PDU)…
CVE-2026-98490High· 7.5⚖ disputedkernel: net: openvswitch: conntrack: fix helper UAF due to extensions realloc (CVE-2026-98490)
A flaw was found in the Linux kernel's Open vSwitch subsystem. When connection tracking helpers process unconfirmed connections, subsequent memory reallocations for extensions can leave a dangling pointer in the connection expectations lis…
CVE-2026-98485Medium· 5.9kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read (CVE-2026-98485)
A flaw was found in the Linux kernel's netfilter subsystem. This flaw allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted IPv6 packets to an affected system. The issue occurs when an IPv6 routing header…
CVE-2026-98491Medium· 5.9kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry (CVE-2026-98491)
A flaw was found in the Linux kernel's Open vSwitch subsystem. When cloned network packet buffers share an unconfirmed connection tracking entry, committing the entry with conflicting extensions can trigger a use-after-free memory issue du…
CVE-2026-98487Medium· 5.5⚖ disputedkernel: net: bridge: mdb: restart port group walk after deletion (CVE-2026-98487)
A flaw was found in the Linux kernel's network bridge subsystem. When deleting multicast database (MDB) port groups, the kernel can maintain a stale reference to memory that has already been freed during recursive group removal, resulting …
CVE-2026-98499Medium· 6.8kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (CVE-2026-98499)
A flaw was found in the Linux kernel's Wacom Human Interface Device (HID) driver. When processing a device report descriptor with mismatched usage and count configurations, the driver can calculate an invalid memory offset and perform an o…
CVE-2026-98497Medium· 5.6kernel: net/mlx5e: fix swapped IPv6 IPsec policy masks (CVE-2026-98497)
A flaw was found in the Linux kernel's mlx5 network driver. When configuring IPv6 IPsec (Internet Protocol Security) rules with differing source and destination prefix lengths, the driver inadvertently swaps the source and destination addr…
CVE-2026-98501Medium· 5.1⚖ disputedkernel: HID: alps: fix use-after-free on input2 registration failure (CVE-2026-98501)
A flaw was found in the Linux kernel's Alps Human Interface Device (HID) driver. If registration of an input device fails during configuration, the driver frees the device memory while communication channels are already active, leaving a d…
CVE-2026-98512Medium· 5.5kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_sched (CVE-2026-98512)
A flaw was found in the Linux kernel's Nouveau graphics driver. When destroying a GPU scheduler object, the driver frees memory prematurely while user-space synchronization objects still hold references to it. A local, unprivileged user co…
CVE-2026-98507Medium· 4.7⚖ disputedkernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (CVE-2026-98507)
A flaw was found in the Linux kernel's memory management subsystem. Due to a missing synchronization barrier when preparing anonymous virtual memory areas, concurrent memory operations can be reordered. A local attacker can exploit this ra…
CVE-2026-98510Medium· 4.7⚖ disputedkernel: drm/xe/vm: nuke PTs only after unlinking contested VMAs (CVE-2026-98510)
A flaw was found in the Linux kernel's Intel Xe graphics driver. When closing a GPU virtual memory space, page tables were destroyed before contested virtual memory areas were properly unlinked from shared buffer objects. A concurrent thre…
CVE-2026-98517Medium· 5.5⚖ disputedkernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (CVE-2026-98517)
A flaw was found in the Linux kernel's Nouveau graphics driver. When handling buffer objects in system memory, the driver improperly accesses memory past the allocated resource boundary. A local attacker could exploit this flaw to cause a …
CVE-2026-98515Medium· 4.7⚖ disputedkernel: drm/nouveau: fix double-free in nvif_vmm_dtor (CVE-2026-98515)
A flaw was found in the Linux kernel's Nouveau graphics driver. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by crashing the system or potentially escalate privileges. During device initialization failures,…
CVE-2026-98532High· 7.5kernel: ipv6: do not let ipv6_find_hdr() return an offset past the packet end (CVE-2026-98532)
A flaw was found in the Linux kernel. A remote attacker could cause a Denial of Service (DoS) or memory corruption by sending specially crafted IPv6 network packets. The IPv6 extension header parsing mechanism fails to verify that the decl…
CVE-2026-98542Low· 2.3kernel: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict (CVE-2026-98542)
A flaw was found in the Linux kernel's cpuset subsystem, which can lead to a denial of service (DoS) or compromised resource isolation. A local user with permissions to configure control groups (cgroups) can trigger this flaw by creating a…
CVE-2026-98547Medium· 5.5kernel: af_packet: fix integer overflow in prb_calc_retire_blk_tmo() (CVE-2026-98547)
A flaw was found in the Linux kernel's af_packet network socket implementation. An integer overflow occurs during timeout calculations when configuring packet receive rings with large block sizes. A local user with raw network privileges c…
CVE-2026-98551Low· 3.3kernel: perf/core: Fill branch entries with a single assignment (CVE-2026-98551)
A flaw was found in the Linux kernel's Performance Events (perf) subsystem on ARM64 architectures. This flaw allows a local user to cause an information disclosure of sensitive kernel memory. The issue occurs because certain branch trackin…
CVE-2026-98549Medium· 4.8⚖ disputedkernel: tcp: prevent collapsing skbs across boundary in rtx queue (CVE-2026-98549)
A flaw was found in the Linux kernel's TCP subsystem. When a TCP connection transitions to hardware-assisted encryption, data packets queued after the transition can be improperly merged with unencrypted packets in the retransmission queue…
CVE-2026-98548High· 7.5⚖ disputedkernel: sctp: discard the rest of the packet on a stale-cookie error (CVE-2026-98548)
A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. A remote attacker or an unprivileged local user could trigger a Denial of Service (DoS) or memory corruption by sending specially crafted pa…
CVE-2026-98554Medium· 5.5kernel: vlan: ensure sufficient headroom in vlan_dev_hard_header() (CVE-2026-98554)
A flaw was found in the Linux kernel's virtual local area network (VLAN) driver. When processing network packets that lack sufficient reserved buffer space (headroom) before network headers are appended, the system triggers a panic conditi…
CVE-2026-98550High· 7.5kernel: tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow (CVE-2026-98550)
A flaw was found in the TIPC (Transparent Inter-Process Communication) subsystem of the Linux kernel. This flaw allows an attacker to cause a Denial of Service (DoS) by sending unexpected or duplicate group acknowledgment messages. Due to …
CVE-2026-98556Medium· 5.5kernel: gve: DQO: reject TSO packets with an out of range MSS (CVE-2026-98556)
A flaw was found in the Linux kernel's Google Virtual NIC (gve) driver. A local user with raw packet access or an adjacent guest system can trigger a Denial of Service (DoS) by sending network packets with an excessively large segment size…
CVE-2026-98553Low· 2.3kernel: autofs: fix sbi->pipe file reference leak in autofs_kill_sb() (CVE-2026-98553)
A flaw was found in the Linux kernel's automount file system (autofs). A local user can trigger this issue by initiating an autofs mount operation that fails during initialization, causing the kernel to fail to release associated pipe file…
CVE-2026-98559Medium· 4.7kernel: net/smc: fix UAF on lgr list traversal in smcr_port_err() (CVE-2026-98559)
A flaw was found in the Linux kernel's Shared Memory Communications (SMC) subsystem. When processing port errors, the kernel traverses active link groups without holding the appropriate lock, allowing a concurrent termination event to free…
CVE-2026-98568Medium· 4.7kernel: vxlan: use one headroom snapshot for neighbour replies (CVE-2026-98568)
A flaw was found in the Linux kernel's VXLAN (Virtual Extensible LAN) networking module. A race condition can occur when link properties are modified while neighbour advertisement reply packets are being processed, leading to inconsistent …
CVE-2026-98558Medium· 4.1kernel: net: flush skb_defer_nodes in dev_cpu_dead() (CVE-2026-98558)
A flaw was found in the Linux kernel's networking subsystem. When a central processing unit (CPU) is taken offline, pending network packet buffers held in deferred processing queues are not properly flushed. A privileged local user or admi…