Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

The vulnerability (CVE-2026-55893) affects the Capstone disassembly framework used in Red Hat Hardened Images RPMs. It arises from improper validation of the operand array size in the SH floating-point decoders, leading to a heap buffer overflow. This can be triggered by a local attacker supplying specially crafted SH2A FPU bytecode, which may cause application crashes or potentially allow arbitrary code execution. Red Hat has released updated RPMs (capstone-5.0.8-0.3.hum1 and related packages) that fix this vulnerability.

The vulnerability can lead to denial of service through application crashes and has the potential for arbitrary code execution if exploited. This represents a significant security risk for affected systems running vulnerable versions of the Capstone packages within Red Hat Hardened Images.

Red Hat has issued updated RPM packages for Capstone (version 5.0.8-0.3.hum1) that address this vulnerability. Users of Red Hat Hardened Images should apply these updates promptly to remediate the issue. Refer to the Red Hat advisory RHSA-2026:59419 and https://images.redhat.com/ for detailed update instructions.