Red Hat issued a security advisory (RHSA-2026:30652) for Red Hat Hardened Images RPMs, specifically updating busybox packages to version 1.37.0-7.3.hum1 for aarch64 and x86_64 architectures. This update addresses CVE-2026-29004, a vulnerability categorized under CWE-131. The advisory does not explicitly state a fixed version or patch availability beyond the updated RPMs. The CVSS vector indicates a high severity vulnerability with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on integrity and availability. No known exploits in the wild have been reported.

The vulnerability CVE-2026-29004 in busybox affects Red Hat Hardened Images and could potentially allow an attacker to impact system integrity and availability. The CVSS vector suggests the vulnerability can be exploited remotely without privileges or user interaction, with high impact on integrity and availability. However, no known exploits in the wild have been reported at this time.

Red Hat has released updated busybox RPM packages (version 1.37.0-7.3.hum1) for affected architectures. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat to remediate the vulnerability. No additional mitigation steps are specified in the advisory. Patch status is confirmed by the availability of updated RPMs in the advisory.