Red Hat issued a security advisory (RHSA-2026:42853) for a high severity vulnerability (CVE-2026-11605) categorized under CWE-400, affecting the bind packages included in Red Hat Hardened Images RPMs. The advisory lists updated RPMs for bind version 9.18.50-22.hum1 for aarch64 and x86_64 architectures. The update is described as a bug fix and enhancement update. The advisory does not specify which versions are vulnerable or fixed, nor does it provide a CVSS score or detailed technical exploit information. No known exploits have been reported in the wild. The vendor advisory directs users to apply the update via Red Hat Hardened Images resources.

The vulnerability is rated as high severity and is associated with the bind DNS software packages in Red Hat Hardened Images. The CWE-400 classification suggests a potential resource exhaustion or denial of service condition. However, no known exploits in the wild have been reported, and no detailed impact scenarios are provided in the advisory.

Red Hat has released updated bind RPM packages (version 9.18.50-22.hum1) as part of the Hardened Images update. Users of affected Red Hat Hardened Images should apply these updates following Red Hat's official guidance at https://images.redhat.com/. Patch status is confirmed by the vendor advisory indicating a fix is available. No additional mitigation steps are specified or required beyond applying the update.