Red Hat Security Advisory: OpenShift Container Platform 4.22.3 bug fix and security update
Red Hat OpenShift Container Platform 4.22.3 includes security updates addressing two vulnerabilities: a denial of service issue in gnutls via DTLS packet reordering (CVE-2026-42009) and a kernel vulnerability in net/sched act_pedit extending the writable skb range per key (CVE-2026-46331). These vulnerabilities affect OpenShift Container Platform 4.22 deployments on multiple architectures. Users are advised to upgrade to the updated packages and images available through the appropriate release channels. Instructions for upgrading clusters are provided by Red Hat documentation.
AI Analysis
Technical Summary
This advisory covers two security vulnerabilities in Red Hat OpenShift Container Platform 4.22. The first, CVE-2026-42009, is a denial of service vulnerability in gnutls related to DTLS packet reordering. The second, CVE-2026-46331, is a kernel vulnerability involving the net/sched act_pedit component that extends the writable skb range per key. Red Hat has released OpenShift Container Platform 4.22.3 with fixes for these issues. The advisory recommends upgrading to the updated packages and images as soon as they are available in the appropriate release channels. Detailed upgrade instructions are provided by Red Hat. The security impact is rated as Important by Red Hat Product Security.
Potential Impact
The vulnerabilities include a denial of service condition via DTLS packet reordering in gnutls and a kernel-level issue potentially affecting network scheduling. These could lead to service disruption or instability in affected OpenShift Container Platform 4.22 deployments. The advisory does not report known exploits in the wild. The impact is rated as Important (high severity) by Red Hat.
Mitigation Recommendations
Red Hat has released OpenShift Container Platform 4.22.3 containing fixes for these vulnerabilities. Users of OpenShift Container Platform 4.22 are advised to upgrade to these updated packages and images through the official release channels using the OpenShift CLI (oc) or web console. Detailed upgrade instructions are available in Red Hat's documentation. Since this is an official fix, applying the update fully mitigates the vulnerabilities.
Red Hat Security Advisory: OpenShift Container Platform 4.22.3 bug fix and security update
Description
Red Hat OpenShift Container Platform 4.22.3 includes security updates addressing two vulnerabilities: a denial of service issue in gnutls via DTLS packet reordering (CVE-2026-42009) and a kernel vulnerability in net/sched act_pedit extending the writable skb range per key (CVE-2026-46331). These vulnerabilities affect OpenShift Container Platform 4.22 deployments on multiple architectures. Users are advised to upgrade to the updated packages and images available through the appropriate release channels. Instructions for upgrading clusters are provided by Red Hat documentation.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers two security vulnerabilities in Red Hat OpenShift Container Platform 4.22. The first, CVE-2026-42009, is a denial of service vulnerability in gnutls related to DTLS packet reordering. The second, CVE-2026-46331, is a kernel vulnerability involving the net/sched act_pedit component that extends the writable skb range per key. Red Hat has released OpenShift Container Platform 4.22.3 with fixes for these issues. The advisory recommends upgrading to the updated packages and images as soon as they are available in the appropriate release channels. Detailed upgrade instructions are provided by Red Hat. The security impact is rated as Important by Red Hat Product Security.
Potential Impact
The vulnerabilities include a denial of service condition via DTLS packet reordering in gnutls and a kernel-level issue potentially affecting network scheduling. These could lead to service disruption or instability in affected OpenShift Container Platform 4.22 deployments. The advisory does not report known exploits in the wild. The impact is rated as Important (high severity) by Red Hat.
Mitigation Recommendations
Red Hat has released OpenShift Container Platform 4.22.3 containing fixes for these vulnerabilities. Users of OpenShift Container Platform 4.22 are advised to upgrade to these updated packages and images through the official release channels using the OpenShift CLI (oc) or web console. Detailed upgrade instructions are available in Red Hat's documentation. Since this is an official fix, applying the update fully mitigates the vulnerabilities.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:29794
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-46331"]
- Cvss Version
- null
Threat ID: 6a4452ea27e9c797198e1b20
Added to database: 06/30/2026, 23:36:10 UTC
Last enriched: 06/30/2026, 23:53:04 UTC
Last updated: 07/01/2026, 00:57:01 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.