openshift_container_platform vulnerabilities
CVEs whose affected-version data names the openshift_container_platform package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
478 CVEsRSS
CVE-2026-89737High· 7.0kernel: usb: typec: thunderbolt: Disable work before freeing tbt on remove (CVE-2026-89737)
A flaw was found in the Linux kernel's USB Type-C Thunderbolt driver. The `tbt_altmode_remove()` function fails to properly disable and drain work items before freeing associated plug and cable references. This oversight can lead to a use-…
CVE-2026-89734Medium· 5.5kernel: usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init() (CVE-2026-89734)
A flaw was found in the Linux kernel's USB Video Class (UVC) gadget driver. This vulnerability occurs in the `uvcg_video_init()` function when the `kthread_run_worker()` function fails. In such a scenario, an error logging mechanism attemp…
CVE-2026-89728Medium· 5.5kernel: i3c: renesas: Fix out-of-bounds access for newdevs mask (CVE-2026-89728)
A flaw was found in the Linux kernel's I3C Renesas driver. When the I3C bus is empty and software initiates Dynamic Address Assignment (DAA), an out-of-bounds access can occur. This is due to an incorrect calculation of the newly discovere…
CVE-2026-89721Medium· 5.5kernel: phy: rockchip-samsung-dcphy: fix out-of-range max_register (CVE-2026-89721)
A flaw was found in the Linux kernel's `phy: rockchip-samsung-dcphy` component. A local attacker with access to the `regmap debugfs` interface could trigger an out-of-bounds read by attempting to dump registers. This occurs because the `ma…
CVE-2026-89716Medium· 5.5kernel: zram: validate deflate params (CVE-2026-89716)
A flaw was found in the zram component of the Linux kernel. This vulnerability occurs because the system does not properly validate user-supplied deflate parameters, specifically `winbits` values. An attacker could exploit this by providin…
CVE-2026-89714Medium· 5.5kernel: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails (CVE-2026-89714)
A flaw was found in the Linux kernel's Network File System (NFS) component. When an NFSv4 mount attempt fails, the nfs4_server_common_setup() function does not properly free a memory allocation for the delegation hash table. A client that …
CVE-2026-89666High· 7.0kernel: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops (CVE-2026-89666)
A flaw was found in the kernel. A remote attacker, acting as an NFSv3 client, can send malformed time values during SETATTR or create operations. This can lead to the corruption of on-disk metadata, resulting in incorrect timestamps for fi…
CVE-2026-89772High· 7.0kernel: btrfs: write-protect folios during data writeback (CVE-2026-89772)
A flaw was found in the Btrfs filesystem of the Linux kernel. This vulnerability allows a local attacker with write access to a memory-mapped file to modify data while it is being written to disk. This can lead to data corruption, where th…
CVE-2026-89770Medium· 5.5kernel: iomap: don't free integrity payload that doesn't exist (CVE-2026-89770)
A flaw was found in the `iomap` component of the Linux kernel. This vulnerability occurs when Protection Information (PI) verification is disabled on a block device, causing `fs_bio_integrity_alloc` to not allocate a bio integrity payload.…
CVE-2026-89768Medium· 5.5kernel: fs: fix user path of nested backing files (CVE-2026-89768)
A flaw was found in the Linux kernel's filesystem (fs) component. When using nested overlay filesystems (overlayfs), a local user could exploit an issue where the backing_file_open() function incorrectly derives the path for mapped files. …
CVE-2026-89766High· 7.0kernel: pidfd: hold exec_update_lock around namespace ioctl (CVE-2026-89766)
A flaw was found in the Linux kernel. A local attacker could exploit a race condition in the `pidfd` subsystem, specifically within the `PIDFD_GET_*_NAMESPACE` ioctls. This vulnerability occurs because the system does not properly hold a l…
CVE-2026-89759Medium· 5.5kernel: mm/kmemleak: avoid soft lockup when scanning task stacks (CVE-2026-89759)
A flaw was found in the Linux kernel's memory leak detector (kmemleak). When kmemleak_scan() attempts to scan task stacks on systems with a large number of threads, it can hold a CPU for an extended period without allowing other processes …
CVE-2026-89757Medium· 5.5kernel: mm/mglru: fix and remove redundant unevictable folio handling (CVE-2026-89757)
A flaw was found in the Linux kernel's memory management unit (MMU), specifically within the multi-generational Least Recently Used (mglru) mechanism. A bug in how the kernel handles unevictable memory pages can lead to these pages remaini…
CVE-2026-89740Medium· 5.5kernel: serial: imx: serialize imx_uart_ports[] lifetime (CVE-2026-89740)
A flaw was found in the Linux kernel's `serial: imx` component. The `imx_uart_probe()` function publishes a device-managed allocated port in the `imx_uart_ports[]` array before it is fully added. If the port addition fails or the port is r…
CVE-2026-89092Medium· 4.2glibc: nscd stack overflow leads to degraded DNS resolution (CVE-2026-89092)
A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System (DNS) server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, ca…
CVE-2026-80946Medium· 5.5kernel: fuse: copy request headers via a stack buffer for io-uring (CVE-2026-80946)
A flaw was found in the Linux kernel's FUSE (Filesystem in Userspace) component. The `io-uring` transport attempts to copy request headers directly to or from user space without proper memory validation. A local attacker could exploit this…
CVE-2026-80940Medium· 5.5kernel: wifi: rtw88: pci: fix resource leak on failed NAPI setup (CVE-2026-80940)
A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI (Networked Attached Peripheral Interface) setup fails, allocated PCI resources are not properly released. This resource leak could potentially l…
CVE-2026-89451Medium· 5.5kernel: iommu/sva: Set handle->dev before the SVA handle is visible (CVE-2026-89451)
A flaw was found in the Linux kernel's IOMMU (Input/Output Memory Management Unit) SVA (Shared Virtual Addressing) component. A race condition during the attachment of an SVA handle can lead to a situation where a device pointer is not pro…
CVE-2026-89449Medium· 5.5kernel: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add (CVE-2026-89449)
A flaw was found in the Linux kernel's Input-Output Memory Management Unit (IOMMU) subsystem. When a device addition fails during the `iommu_mock_device_add()` operation, the allocated device IOMMU structure is not properly deallocated. Th…
CVE-2026-89446Medium· 5.5kernel: iommufd: Release current IOAS on xa_store() failure (CVE-2026-89446)
A flaw was found in the Linux kernel's iommufd component. When the system attempts to store an Input/Output Address Space (IOAS) object and the storage operation fails, the IOAS object's associated resources, such as its write lock and obj…
CVE-2026-89439Medium· 5.5kernel: platform/x86: ISST: Add a NULL check for sst_inst[] (CVE-2026-89439)
A flaw was found in the Linux kernel's Intel Speed Select Technology (ISST) driver. A missing NULL check for `isst_common.sst_inst[]` during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vul…
CVE-2026-80996Medium· 5.5kernel: net: l2tp: do not propagate multicast notification errors (CVE-2026-80996)
A flaw was found in the Linux kernel's L2TP (Layer 2 Tunneling Protocol) networking component. Specifically, the netlink handlers responsible for creating and modifying L2TP tunnels and sessions may fail to propagate multicast notification…
CVE-2026-80993Medium· 5.5kernel: net: phylink: correctly validate returned PCS in phylink_inband_caps (CVE-2026-80993)
A flaw was found in the Linux kernel's `net: phylink` component. The `phylink_inband_caps()` function does not correctly validate the return value from `mac_select_pcs`, which can return an error pointer instead of a valid Physical Coding …
CVE-2026-80974Medium· 5.5kernel: mfd: sm501: Fix potential memory leaks during remove (CVE-2026-80974)
A flaw was found in the `mfd: sm501` component of the Linux kernel. This vulnerability arises from a failure to properly free allocated memory for `struct sm501_devdata` during the device removal process. A local attacker could potentially…
CVE-2026-89484Medium· 5.5kernel: lockd: fix NULL dereference on lockowner allocation failure (CVE-2026-89484)
A flaw was found in the Linux kernel's `lockd` component. This vulnerability occurs when the Network Lock Manager (NLM) client attempts to initialize file lock operations without successfully allocating a lockowner. This can lead to a NULL…
CVE-2026-89468Medium· 5.5kernel: power: supply: lp8788-charger: fix use-after-free on remove (CVE-2026-89468)
A flaw was found in the Linux kernel's lp8788-charger component. During the removal of the lp8788-charger, a race condition can occur where work can be queued and executed after the associated memory has been freed. This use-after-free vul…
CVE-2026-89467Medium· 5.5kernel: power: supply: qcom_battmgr: fix use-after-free (CVE-2026-89467)
A flaw was found in the Linux kernel's `qcom_battmgr` component. This flaw is a use-after-free vulnerability that occurs because the `qcom_battmgr_pdr_notify()` function can queue `enable_work` even after the associated `battmgr` object ha…
CVE-2026-85781High· 8.7Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion…
Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion…
CVE-2026-56855Medium· 5.3golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages (CVE-2026-56855)
A flaw was found in golang.org/x/crypto/ssh. After a channel has been established, a remote malicious peer could send specially crafted messages. This could lead to a deadlock of the entire connection, resulting in a Denial of Service (DoS…
CVE-2026-78662Medium· 5.3golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding (CVE-2026-78662)
A flaw was found in golang.org/x/crypto/ssh. A malicious remote attacker could flood a channel's incoming requests before it is established, leading to a deadlock of the entire connection. This could result in a denial of service (DoS) for…