Threat database

A heap-based buffer overflow vulnerability exists in the corosync package used by Red Hat Enterprise Linux cluster software. This flaw occurs in the totempg assembly buffer during fragmented message reassembly. Red Hat has issued a security update addressing this vulnerability in multiple Red Hat Enterprise Linux 9.6 variants.

A vulnerability in containerd CRI version 3.0 causes a Goroutine leak during ExecSync operations, which can lead to node-level denial of service.

A vulnerability in GIMP's Lighting Effects filter allows improper validation of the number of light sources when processing a specially crafted lighting preset file. This flaw can cause an out-of-bounds write leading to memory corruption. Exploitation requires user interaction by opening a malicious preset file and may result in a crash or arbitrary code execution. A security update addressing this issue is available from Red Hat for their Enterprise Linux 9 distributions.

A heap-based buffer overflow vulnerability exists in GIMP's ICO file loader due to an integer overflow when processing embedded PNG images. This flaw can be triggered by opening a crafted malicious ICO file, potentially leading to arbitrary code execution or application crash. The vulnerability has a high severity score and affects certain Red Hat Enterprise Linux 9 distributions. A security update addressing this issue is available from Red Hat.

A moderate severity security vulnerability (CVE-2026-42533) affecting nginx version 1.24 on Red Hat Enterprise Linux 9 allows arbitrary code execution via crafted HTTP requests. Red Hat has released an update to address this issue. The vulnerability impacts multiple architectures supported by Red Hat Enterprise Linux 9. No public exploit or confirmed exploitation in the wild is reported.

CVE-2026-17527 is a vulnerability in Red Hat OpenShift Virtualization v4.14 related to the containerized-data-importer (CDI) component. The aggregated cdi.kubevirt.io:view ClusterRole grants create permission on the datavolumes/source subresource, which allows users with this view role combined with write access in any namespace to clone and exfiltrate the contents of any PersistentVolumeClaim (PVC) across namespaces. This bypasses namespace isolation and the intended read-only guarantee of the view role. The issue affects all downstream consumers using CDI's default aggregated RBAC roles, including OpenShift Virtualization. No fix is currently available, and mitigation involves restricting cluster-wide ClusterRoleBindings of the view role and auditing namespace permissions.

Red Hat has issued a security advisory for the Node.js 22 module in Red Hat Enterprise Linux 8 addressing multiple vulnerabilities. These include unauthorized filesystem access due to a permission model enforcement flaw (CVE-2026-58043), remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846), and a heap-use-after-free vulnerability in HTTP/2 handling that can lead to denial of service (CVE-2026-56848). The update is rated as Important by Red Hat Product Security. The advisory provides a security update to mitigate these issues.