The advisory addresses CVE-2026-15308, a denial of service vulnerability in the Python 3.14 HTML parser component. The flaw arises from repeated unterminated markup declarations that can cause excessive CPU consumption. The update includes patched RPM packages for python3.14 and related components for Red Hat Hardened Images on aarch64 and x86_64 architectures. The vulnerability is rated as high severity by Red Hat Product Security. The advisory provides detailed package versions and references for applying the update.

Successful exploitation of this vulnerability can lead to a denial of service condition by causing high CPU usage in the Python HTML parser. This may affect applications or services relying on the vulnerable python3.14 packages, potentially leading to service disruption or degraded performance. No known exploits in the wild have been reported at this time.

A patch is available for this vulnerability. Users should apply the updated python3.14 packages (version 3.14.6-1.3.hum1) provided by Red Hat for the affected architectures. Detailed instructions for applying the update are available at https://images.redhat.com/ and https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.