This security advisory from Red Hat addresses vulnerabilities in the Red Hat Hardened Images RPMs for Kubernetes version 1.36. The update includes multiple RPM packages (kubernetes1.36, kubernetes1.36-client, kubernetes1.36-kubeadm, kubernetes1.36-systemd) for aarch64 and x86_64 architectures, all updated to version 1.36.2-2.hum1. The advisory covers CVE-2026-47262 and four additional CVEs, with a medium severity rating. The update provides bug fixes and enhancements but does not specify detailed technical vulnerability descriptions or exploit methods. No known exploits in the wild have been reported. The advisory references Red Hat's official errata and update channels for applying the fix.

The vulnerabilities addressed affect Kubernetes 1.36 components within Red Hat Hardened Images, potentially impacting the security and stability of Kubernetes deployments using these images. The medium severity rating indicates a moderate risk that could affect confidentiality, integrity, or availability if exploited. However, no active exploitation has been reported, and the update aims to mitigate these risks through bug fixes and enhancements.

A fixed update is available from Red Hat for the affected Kubernetes 1.36 RPM packages (version 1.36.2-2.hum1). Users should apply this update via Red Hat's official repositories as detailed in the advisory. Since this is an official fix, applying the update fully mitigates the vulnerabilities addressed. No additional mitigation steps are indicated by the vendor advisory.