This security advisory from Red Hat Product Security addresses a critical vulnerability (CVE-2026-38969) in Red Hat Hardened Images RPMs, specifically affecting Rust-related packages. The update includes new versions of multiple Rust RPMs (version 1.96.1-1.hum1) for aarch64 and x86_64 architectures and noarch packages. The advisory does not specify affected versions or detailed technical exploit information but references CWE-444, which relates to improper control of dynamically loaded code. The update is intended as a bug fix and enhancement to mitigate the vulnerability. No known exploits have been reported in the wild.

The vulnerability is classified as critical and relates to the Red Hat Hardened Images RPMs for Rust packages. While specific impact details are not provided, the CWE-444 classification suggests risks associated with improper control of dynamically loaded code, which could potentially allow unauthorized code execution or other security breaches if exploited. No known active exploitation has been reported.

Red Hat has released updated RPM packages (version 1.96.1-1.hum1) for the affected Rust components as part of this advisory. Users of Red Hat Hardened Images should apply these updates promptly to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory. Patch status is confirmed by the availability of these updated RPMs. Refer to https://images.redhat.com/ for details on applying the update.