Red Hat released a security advisory RHSA-2026:37535 addressing CVE-2026-15308, a vulnerability in python3.13 packages included in Red Hat Hardened Images RPMs. The update provides new package versions (3.13.14-1.3.hum1) for multiple python3.13 RPMs across aarch64 and x86_64 architectures. The vulnerability is categorized under CWE-835, which relates to loop with unreachable exit condition, potentially causing denial of service or other impacts. The advisory does not specify affected versions or detailed technical exploitation information. No CVSS score is assigned, and no known exploits in the wild have been reported.

The vulnerability affects python3.13 RPMs in Red Hat Hardened Images, potentially allowing issues related to improper loop conditions (CWE-835). The severity is rated high by Red Hat, indicating a significant security risk if unpatched. No known active exploitation has been reported. The impact may include denial of service or other stability issues related to the vulnerability.

Red Hat has issued updated python3.13 RPM packages (version 3.13.14-1.3.hum1) that address CVE-2026-15308. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat to remediate the vulnerability. No alternative mitigations or workarounds are indicated in the advisory. Patch status is confirmed by the vendor advisory.