Red Hat issued a security advisory (RHSA-2026:30652) for Red Hat Hardened Images RPMs that includes an update to busybox packages to address CVE-2026-29004. The advisory lists busybox-1.37.0-7.3.hum1 and related packages as updated for aarch64 and x86_64 architectures. The vulnerability is associated with CWE-131, which typically relates to improper handling of buffer sizes. The advisory does not provide a CVSS score or detailed technical exploit information. No fixed version range is explicitly stated, and the advisory references Red Hat's update infrastructure for applying the update.

The vulnerability affects busybox packages used in Red Hat Hardened Images. The severity is rated high by the source. CWE-131 indicates a potential buffer-related weakness, which could lead to memory corruption or related impacts if exploited. No known exploits in the wild are reported. The impact is limited to affected busybox RPMs within Red Hat Hardened Images.

Red Hat has released updated busybox RPMs (version 1.37.0-7.3.hum1) to address CVE-2026-29004. Users of Red Hat Hardened Images should apply this update as per Red Hat's official guidance available at https://images.redhat.com/. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated or required beyond applying the update.