The Container Network Interface (CNI) project includes libraries for configuring network interfaces in Linux containers. Two denial of service vulnerabilities affecting the Go crypto/tls and crypto/x509 libraries used by containernetworking-plugins have been fixed. CVE-2026-32283 involves denial of service via multiple TLS 1.3 key update messages, and CVE-2026-32280 involves denial of service in certificate chain building. Red Hat released an updated containernetworking-plugins package for Red Hat Enterprise Linux 9.6 Extended Update Support to remediate these issues. The advisory references Red Hat Security Advisory RHSA-2026:20608 for detailed patch and update instructions.

Successful exploitation of these vulnerabilities could cause denial of service conditions in applications using the affected containernetworking-plugins package, potentially disrupting container network connectivity. There are no reports of active exploitation in the wild. The impact is rated as important by Red Hat, indicating a significant but not critical severity level.

Red Hat has released an updated containernetworking-plugins package (version 1.6.2-3.el9_6.1) that addresses these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.6 Extended Update Support versions should apply this update promptly. Refer to the official Red Hat advisory RHSA-2026:20608 and the update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps. No additional mitigation is indicated by the vendor advisory.