This security advisory from Red Hat Product Security covers vulnerabilities in Red Hat Hardened Images RPMs, specifically affecting dotnet8.0 packages such as aspnetcore-runtime, dotnet-runtime, dotnet-sdk, and related components for aarch64 and x86_64 architectures. The advisory references CVE-2026-42899 among others, with a CVSS vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on availability. The remediation level is an official fix, and patches are available for the affected RPMs. The advisory includes a list of updated RPM versions and directs users to Red Hat's update channels for applying the fixes.

The vulnerabilities addressed have a high severity and can impact system availability (denial of service). There is no impact on confidentiality or integrity reported. The vulnerabilities can be exploited remotely without authentication or user interaction. No known exploits in the wild have been reported at this time.

An official fix is available from Red Hat for the affected RPMs in the Red Hat Hardened Images. Users should apply the provided updates to the dotnet8.0 packages as detailed in the advisory. Refer to Red Hat's errata and update channels for instructions on applying these patches. No additional mitigation steps are indicated by the vendor.