Openshift container platform

This hub aggregates every CVE we track for Openshift container platform, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Openshift container platform.

• CVE-2026-13002Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing4.4Aug 14, 2026
• CVE-2026-19617Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser5.5Aug 14, 2026
• CVE-2026-19548Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing5.5Aug 12, 2026
• CVE-2026-71227Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return5.1Aug 5, 2026
• CVE-2026-71226Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path7.3Aug 5, 2026
• CVE-2026-71225Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries6.5Aug 5, 2026
• CVE-2026-68743Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5Aug 4, 2026
• CVE-2026-68744Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply3.3Aug 4, 2026
• CVE-2026-18477Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape4.4Aug 3, 2026
• CVE-2026-18508Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite4.4Aug 3, 2026
• CVE-2026-68742Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr5.5Aug 3, 2026
• CVE-2026-13757P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing6.2Jun 29, 2026
• CVE-2026-13595Util-linux: util-linux: heap use-after-free in libblkid nested partition probing6.8Jun 29, 2026
• CVE-2026-55653Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service4.3Jun 23, 2026
• CVE-2026-12725Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies5.9Jun 22, 2026