The Red Hat security advisory RHSA-2026:23992 reports a high-severity vulnerability affecting Red Hat Hardened Images RPMs, particularly the python-attrs package versions python3-attrs-26.1.0-3.hum1 (noarch) and python-attrs-26.1.0-3.hum1.src (src). The vulnerabilities correspond to CVE-2026-49476 and CVE-2026-49477 and relate to resource management issues (CWE-770) and potentially improper handling of system resources (CWE-1333). The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). The advisory does not explicitly state that a patch is available or provide remediation instructions beyond referencing the update. No known exploits have been reported in the wild.

The vulnerabilities can cause a denial of service condition affecting the availability of systems using the affected Red Hat Hardened Images RPMs, specifically the python-attrs package. There is no indication of confidentiality or integrity impact. No known exploits have been reported, suggesting limited or no active exploitation at this time.

The Red Hat advisory references an update including the python-attrs RPMs (python3-attrs-26.1.0-3.hum1 noarch and python-attrs-26.1.0-3.hum1 src) but does not explicitly confirm that these updates fully remediate the vulnerabilities. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/errata/RHSA-2026:23992 and https://images.redhat.com/ for current remediation guidance and instructions on applying updates. No additional mitigation steps are provided by the vendor.