This Red Hat security advisory covers a set of vulnerabilities identified by CVE identifiers including CVE-2026-67312 affecting Red Hat Hardened Images RPMs, notably the grafana13.1 package. The vulnerabilities involve weaknesses categorized under CWEs 400 (Uncontrolled Resource Consumption), 674 (Uncontrolled Recursion), 915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes), and 770 (Allocation of Resources Without Limits or Throttling). The advisory references updated RPM packages grafana13.1-13.1.1-0.3.hum1 for aarch64 and x86_64 architectures. While the advisory does not explicitly state fixed version ranges, it provides updated packages and directs users to apply these updates. There are no known exploits in the wild at this time.

The vulnerabilities could potentially allow attackers to cause resource exhaustion or improper resource management in affected Red Hat Hardened Images RPMs, which may impact system stability or availability. However, no active exploitation has been reported. The severity is assessed as critical by the source data, though the database-specific severity is moderate. The impact is limited to affected versions of the grafana13.1 package within Red Hat Hardened Images.

Red Hat has released updated RPM packages for grafana13.1 (version 13.1.1-0.3.hum1) that address these vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly to mitigate the issues. Since this is not a cloud service, remediation requires manual update by the user. No further mitigation steps are indicated by the vendor advisory.