Red Hat Security Advisory: OpenShift Container Platform 4.20.22 bug fix and security update
Red Hat OpenShift Container Platform 4.20.22 includes a security update addressing a local privilege escalation vulnerability in the Linux kernel known as the "Dirty Frag" ESP XFRM variant (CVE-2026-43284). This vulnerability affects the kernel used within OpenShift Container Platform deployments on various architectures including x86_64, s390x, ppc64le, and aarch64. The update is rated as having an Important security impact by Red Hat Product Security. Users of OpenShift Container Platform 4.20 are advised to upgrade to the updated packages and container images to mitigate this vulnerability.
AI Analysis
Technical Summary
This advisory addresses a local privilege escalation vulnerability in the Linux kernel (CVE-2026-43284) affecting Red Hat OpenShift Container Platform 4.20.22. The vulnerability, referred to as the "Dirty Frag" ESP XFRM variant, allows a local attacker with low privileges to escalate their privileges on the system. The update includes fixed container images and RPM packages to remediate this issue. Red Hat has rated the security impact as Important and provides upgrade instructions via the OpenShift CLI or web console. The advisory covers multiple hardware architectures and directs users to official Red Hat documentation for upgrade procedures.
Potential Impact
The vulnerability allows a local attacker with low privileges to escalate their privileges to higher levels on the affected system, potentially gaining full control. The CVSS vector indicates a local attack vector with high complexity, requiring low privileges and no user interaction, with a scope change and high impact on confidentiality, integrity, and availability. This could lead to complete system compromise if exploited.
Mitigation Recommendations
A fix is available in Red Hat OpenShift Container Platform 4.20.22 through updated container images and RPM packages. Users should upgrade their OpenShift clusters using the OpenShift CLI (oc) or web console as soon as the updates are available in their release channel. Detailed upgrade instructions are provided in the official Red Hat documentation. No alternative mitigations are specified; applying the official update is the recommended remediation.
Red Hat Security Advisory: OpenShift Container Platform 4.20.22 bug fix and security update
Description
Red Hat OpenShift Container Platform 4.20.22 includes a security update addressing a local privilege escalation vulnerability in the Linux kernel known as the "Dirty Frag" ESP XFRM variant (CVE-2026-43284). This vulnerability affects the kernel used within OpenShift Container Platform deployments on various architectures including x86_64, s390x, ppc64le, and aarch64. The update is rated as having an Important security impact by Red Hat Product Security. Users of OpenShift Container Platform 4.20 are advised to upgrade to the updated packages and container images to mitigate this vulnerability.
CVSS v3.1
Score 7.8high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory addresses a local privilege escalation vulnerability in the Linux kernel (CVE-2026-43284) affecting Red Hat OpenShift Container Platform 4.20.22. The vulnerability, referred to as the "Dirty Frag" ESP XFRM variant, allows a local attacker with low privileges to escalate their privileges on the system. The update includes fixed container images and RPM packages to remediate this issue. Red Hat has rated the security impact as Important and provides upgrade instructions via the OpenShift CLI or web console. The advisory covers multiple hardware architectures and directs users to official Red Hat documentation for upgrade procedures.
Potential Impact
The vulnerability allows a local attacker with low privileges to escalate their privileges to higher levels on the affected system, potentially gaining full control. The CVSS vector indicates a local attack vector with high complexity, requiring low privileges and no user interaction, with a scope change and high impact on confidentiality, integrity, and availability. This could lead to complete system compromise if exploited.
Mitigation Recommendations
A fix is available in Red Hat OpenShift Container Platform 4.20.22 through updated container images and RPM packages. Users should upgrade their OpenShift clusters using the OpenShift CLI (oc) or web console as soon as the updates are available in their release channel. Detailed upgrade instructions are provided in the official Red Hat documentation. No alternative mitigations are specified; applying the official update is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_base
- Csaf Version
- 2.0
- Publisher
- Bundesamt für Sicherheit in der Informationstechnik
- Advisory Id
- WID-SEC-W-2026-1430
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-43500"]
- Cvss Version
- 3.1
Threat ID: 6a16098de29bf47b506548bc
Added to database: 05/26/2026, 20:58:53 UTC
Last enriched: 07/19/2026, 22:13:44 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 158
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.