openshift_container_platform vulnerabilities
CVEs whose affected-version data names the openshift_container_platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
467 CVEsRSS
CVE-2026-80948Medium· 5.5kernel: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() (CVE-2026-80948)
A flaw was found in the Linux kernel's iwlwifi driver. An error handling issue within the `iwl_op_mode_dvm_start()` function can cause a memory leak. This occurs when certain error paths bypass a memory deallocation step, leading to unrele…
CVE-2026-89722Medium· 5.5kernel: PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io() (CVE-2026-89722)
A flaw was found in the Linux kernel's PCI/sysfs component. A local user with root privileges could trigger an out-of-bounds read in the `pci_write_legacy_io()` function by writing to the `legacy_io` sysfs file with a size less than four b…
CVE-2026-89642High· 7.0kernel: cifs: call pagecache_isize_extended() in cifs_setsize() when extending (CVE-2026-89642)
A flaw was found in the Linux kernel's Common Internet File System (CIFS) implementation. When a client extends a file, the `cifs_setsize()` function fails to properly zero out the newly extended portion of the page cache. This oversight c…
CVE-2026-89637High· 7.0⚖ disputedkernel: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (CVE-2026-89637)
A flaw was found in the Linux kernel's Server Message Block (SMB) client. When processing a malformed secondary TRANSACT2 response, a use-after-free (UAF) vulnerability and a buffer leak can occur in the `cifs_check_trans2()` function. Thi…
CVE-2026-80998Medium· 5.5kernel: net: bnxt: ring the doorbell when SW USO exits early (CVE-2026-80998)
A flaw was found in the Linux kernel's `bnxt` network driver. When processing a burst of packets, the driver may fail to notify the network device (ring the doorbell) if the Software UDP Segmentation Offload (SW USO) path exits prematurely…
CVE-2026-80995Medium· 5.5⚖ disputedkernel: net: mctp: hold a reference to the route device in mctp_route_lookup() (CVE-2026-80995)
A flaw was found in the Linux kernel's MCTP (Message Control Transport Protocol) networking implementation. This vulnerability arises because the `mctp_route_lookup()` function accesses a route device without holding a persistent reference…
CVE-2026-80991Medium· 5.5⚖ disputedkernel: net: ravb: serialize PTP clock teardown (CVE-2026-80991)
A flaw was found in the Linux kernel's `net: ravb` module. A race condition exists during the Precision Time Protocol (PTP) clock teardown. This allows the `ravb_ptp_interrupt()` function to attempt to use a PTP clock after it has been fre…
CVE-2026-80986High· 7.0⚖ disputedkernel: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (CVE-2026-80986)
A flaw was found in the Linux kernel's SMC-Rv2 network component. A remote attacker could exploit this vulnerability by sending a specially crafted message during an SMC-Rv2 link addition. This can lead to a slab-out-of-bounds write, poten…
CVE-2026-80985High· 7.0⚖ disputedkernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)
A flaw was found in the Linux kernel's Server Message Block over Remote Direct Memory Access (SMC-Rv2) protocol implementation. The `smc_llc_rmt_delete_rkey()` and `smc_llc_save_add_link_rkeys()` functions incorrectly handle oversized LLC …
CVE-2026-80981High· 7.0⚖ disputedkernel: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (CVE-2026-80981)
A flaw was found in the Linux kernel's net/smc component. A local attacker could exploit a use-after-free vulnerability in the `smc_llc_srv_add_link()` function, where a freed memory region is improperly accessed. This can lead to memory c…
CVE-2026-80980Medium· 5.5⚖ disputedkernel: net/smc: stop killed, freed and out_of_sync sharing a byte (CVE-2026-80980)
A flaw was found in the Linux kernel's SMC (Server Message Block over Remote Direct Memory Access) protocol implementation. A concurrency issue exists where three connection state flags (killed, freed, and out_of_sync) share a single byte …
CVE-2026-80975Medium· 5.5⚖ disputedkernel: mfd: qnap-mcu: keep the reply buffer alive past a command timeout (CVE-2026-80975)
A flaw was found in the Linux kernel's `qnap-mcu` driver. This vulnerability occurs when the driver processes commands and a reply from the Microcontroller Unit (MCU) arrives after a command has timed out or failed. The driver may write th…
CVE-2026-80962Medium· 5.5kernel: dm-pcache: validate geometry fields from on-disk cache_info (CVE-2026-80962)
A flaw was found in the Linux kernel's dm-pcache component. A local attacker with administrative privileges (CAP_SYS_ADMIN) could manipulate on-disk cache metadata to provide invalid geometry fields. This manipulation could lead to an out-…
CVE-2026-80959Medium· 5.5⚖ disputedkernel: dm-pcache: bound the persisted tail-position offset (CVE-2026-80959)
A flaw was found in the Linux kernel's device-mapper persistent cache (dm-pcache) component. A local attacker with administrative privileges (CAP_SYS_ADMIN) could provide a specially crafted cache device, leading to an out-of-bounds read. …
CVE-2026-80958Medium· 5.5⚖ disputedkernel: dm-pcache: clamp the tail kset read to the segment data region (CVE-2026-80958)
A flaw was found in the dm-pcache component of the Linux kernel. The tail-kset read operations, used by cache_replay(), the writeback worker, and the garbage collection (GC) worker, incorrectly calculate the length of the data region. This…
CVE-2026-80954Medium· 5.5⚖ disputedkernel: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() (CVE-2026-80954)
A flaw was found in the Linux kernel's i3c driver. The `i3c_device_get_supported_xfer_mode()` function attempts to access a device descriptor without holding the necessary lock. This unlocked dereference can lead to memory corruption, pote…
CVE-2026-80953Medium· 5.5⚖ disputedkernel: i3c: master: adi: initialize the lock before enabling interrupts (CVE-2026-80953)
A flaw was found in the Linux kernel's i3c master driver. A race condition exists where the `adi_i3c_master_probe()` function requests an interrupt and unmasks a register before a critical lock (`xferqueue.lock`) is properly initialized. T…
CVE-2026-80950Medium· 5.5⚖ disputedkernel: i3c: renesas: Check that the transfer is valid before accessing it (CVE-2026-80950)
A flaw was found in the Linux kernel's Renesas I3C driver. This driver uses an asynchronous model for data transfers. When a transfer times out, the associated memory is freed. However, if an interrupt occurs after the memory is freed but …
CVE-2026-80947High· 7.0⚖ disputedkernel: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (CVE-2026-80947)
A flaw was found in the Linux kernel's `rtl8xxxu` Wi-Fi driver. A race condition exists during the driver's stop process, specifically when handling receive (RX) Universal Serial Bus (USB) Request Blocks (URBs). This allows a worker to acc…
CVE-2026-80936Medium· 5.5⚖ disputedkernel: wifi: mt76: mt7925: cancel mlo_pm_work on stop (CVE-2026-80936)
A flaw was found in the Linux kernel's mt7925 Wi-Fi driver. During multi-link power-save setup, the `mlo_pm_work` is queued with a delay but not properly cancelled when the device is stopped. This can lead to the work item attempting to ac…
CVE-2026-89534High· 7.0kernel: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (CVE-2026-89534)
A flaw was found in the Linux kernel's `svcrdma` module. This vulnerability occurs when the system attempts to handle an RDMA (Remote Direct Memory Access) address change, and a critical memory allocation fails. This can lead to a 'use-aft…
CVE-2026-89528High· 7.0kernel: svcrdma: Reject Read lists that exceed the page budget (CVE-2026-89528)
A flaw was found in the Linux kernel's svcrdma component. A remote attacker could send specially crafted Read lists that exceed the page budget. This can lead to a NULL pointer dereference during Direct Memory Access (DMA) mapping, potenti…
CVE-2026-89526High· 7.0kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
A flaw was found in the `svcrdma` component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted `RPC/RDMA Read chunk position` field that is not properly validated against the received inline body l…
CVE-2026-89523High· 7.0⚖ disputedkernel: wifi: mt76: mt7925: cancel pending mlo_pm_work (CVE-2026-89523)
A flaw was found in the Linux kernel's MediaTek mt7925 Wi-Fi driver. When the device is reset, suspended, or unregistered, a pending work item (`mlo_pm_work`) can continue to execute. This can lead to the work item accessing memory that ha…
CVE-2026-89522Medium· 5.5⚖ disputedkernel: media: staging/ipu7: fix async notifier UAF on probe error path (CVE-2026-89522)
A flaw was found in the Linux kernel's media subsystem, specifically within the ipu7 driver. When an error occurs during the device's initial setup (probe error path), a V4L2 asynchronous notifier is not correctly removed from a global lis…
CVE-2026-89520Medium· 5.5⚖ disputedkernel: sched/core: Make core-sched flips wait for in-flight selections (CVE-2026-89520)
A flaw was found in the Linux kernel's core scheduling component. A race condition can occur when core scheduling flips complete during task selection, leading to incorrect lock handling. This can result in a resource leak and system insta…
CVE-2026-89513Medium· 5.5kernel: RISC-V: KVM: Fix PMU event info array size overflow (CVE-2026-89513)
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) component for RISC-V architectures. A malicious guest operating system could exploit an integer overflow vulnerability by providing a crafted number of Performance M…
CVE-2026-89507Medium· 5.5⚖ disputedkernel: RDMA/ucma: Lock the handler in ucma_write_cm_event() (CVE-2026-89507)
A flaw was found in the Linux kernel's RDMA/ucma component. A race condition exists in the `ucma_write_cm_event()` function where it re-reads a critical file pointer multiple times without proper locking. This allows another function, `ucm…
CVE-2026-89499Medium· 5.5⚖ disputedkernel: ring-buffer: Stop remote reader update when page swap fails (CVE-2026-89499)
A flaw was found in the Linux kernel's ring-buffer component. When a remote reader update fails during a page swap, the system incorrectly proceeds as if the swap succeeded. This can lead to log flooding, potentially causing a denial of se…
CVE-2026-89486Medium· 5.5⚖ disputedkernel: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() (CVE-2026-89486)
A flaw was found in the Linux kernel's Intelligent Platform Management Interface (IPMI) subsystem. Due to incorrect synchronization during the deallocation of command receiver objects, a use-after-free vulnerability can occur. This allows …