Red Hat issued a security advisory for Red Hat Hardened Images RPMs including various .NET 9.0 packages, addressing multiple CVEs including CVE-2026-62901. This particular vulnerability involves unchecked input for loop conditions in System.Net.WebSockets, which can be exploited by unauthenticated attackers to cause denial of service by resource exhaustion. The advisory lists updated RPM packages as part of a bug fix and enhancement update but does not explicitly confirm the availability of a patch or mitigation for this vulnerability. The advisory notes that mitigation options either do not exist or do not meet Red Hat's criteria for deployment. No known active exploits have been reported.

The primary impact is a denial of service condition caused by unchecked loop conditions in .NET's System.Net.WebSockets component, which can be triggered remotely without authentication. This can affect service availability and reliability of affected Red Hat products using .NET 6.0 and newer versions. No confidentiality or integrity impacts are reported. No known exploits in the wild have been observed.

The vendor advisory indicates that no effective mitigation currently exists or meets Red Hat's standards for ease of use and deployment. Users should apply the updated RPM packages provided in the advisory once available. Monitoring Red Hat's official channels for patch releases and applying updates promptly is recommended. No temporary workarounds or mitigations are specified.