Red Hat issued a security advisory (RHSA-2026:46515) for Red Hat Hardened Images RPMs, specifically updating coreutils packages to version 9.11-5.1.hum1 for aarch64 and x86_64 architectures. This update addresses CVE-2026-56391, a vulnerability classified as CWE-125 (Out-of-bounds Read). The advisory includes updated RPMs: coreutils, coreutils-common, and coreutils-single. No detailed technical exploitation information or impact scenarios are provided. The advisory does not specify affected versions explicitly, nor does it provide a CVSS score. No known exploits in the wild have been reported.

The vulnerability involves an out-of-bounds read (CWE-125) in coreutils packages used in Red Hat Hardened Images. Such vulnerabilities can potentially lead to information disclosure or application crashes depending on exploitation, but no specific impact details or exploitation reports are provided. The advisory classifies the severity as medium and no known exploits are currently reported.

A security update is available that includes patched versions of coreutils packages (version 9.11-5.1.hum1) for affected architectures. Users of Red Hat Hardened Images should apply this update as provided by Red Hat to remediate the vulnerability. Since this is an official Red Hat advisory with updated packages, applying the update is the recommended mitigation. Patch status is confirmed by the vendor advisory.