This Red Hat security advisory covers vulnerabilities in the dotnet8.0 RPM packages included in Red Hat Hardened Images. The key vulnerability, CVE-2026-59725, involves a flaw in the Socket.IO Engine.IO protocol v4 polling transport where unauthenticated attackers can send malformed binary POST requests with Content-Type application/octet-stream. This improper handling prevents proper HTTP response closure, exhausting server-side connections and sockets, resulting in denial of service. The advisory lists updated RPMs with versions 8.0.28-1.1.hum1 and 8.0.128-1.1.hum1 for various dotnet8.0 components. The advisory references multiple CVEs but does not explicitly state that a fix has been released, though updated packages are available. The vulnerability is rated high severity due to its impact on availability.

The primary impact is denial of service caused by exhaustion of server-side connections and sockets when processing malformed binary POST requests in the Engine.IO protocol v4 polling transport of Socket.IO. This affects the availability of applications using these Red Hat Hardened Images dotnet8.0 components. There is no impact on confidentiality or integrity reported. No known exploits in the wild have been reported at this time.

Updated RPM packages for dotnet8.0 components are available as part of this Red Hat security advisory. Users should apply these updates to mitigate the vulnerabilities. The advisory does not explicitly state that no action is required or that the issue is already mitigated. Therefore, applying the provided RPM updates is the recommended remediation. Since this is not a cloud service, remediation depends on user action to update affected packages.