CVE-2026-73199 is a null pointer dereference vulnerability in the ipa-enrollment SLAPI plugin of Red Hat Enterprise Linux 10. A remote authenticated attacker can trigger a denial of service by sending a malformed LDAP extended operation that omits the JOIN_OID request value, causing the server to crash. The vulnerability impacts availability but does not affect confidentiality or integrity. Mitigation includes restricting LDAP service access to trusted clients and disabling the ipa-enrollment plugin if enrollment is not needed.
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
CVE-2026-73198 is a vulnerability in FreeIPA on Red Hat Enterprise Linux 10 where an unauthenticated remote attacker can send an arbitrarily large request body to the /ipa/i18n_messages endpoint. This causes excessive memory consumption, leading to memory exhaustion, degraded service responsiveness, and denial of service (DoS). The vulnerability has a high severity rating with a CVSS score of 7.5. Red Hat has issued a security advisory and patch updates for related FreeIPA issues, but the advisory specifically lists fixes for Red Hat Enterprise Linux 9. No explicit affected versions for RHEL 10 are provided in the input data.
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.
CVE-2026-73196 is a vulnerability in FreeIPA on Red Hat Enterprise Linux 10 where a low-privilege authenticated user can submit an oversized One-Time Password (OTP) key. This oversized key is decoded and re-encoded without size limits, causing excessive CPU and memory consumption that can degrade the availability of the IPA service, resulting in a denial of service.
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
An integer overflow vulnerability exists in the libvirt library used by Red Hat Enterprise Linux 10. An unprivileged local user can exploit this flaw in the NodeGetFreePages RPC handler to cause a heap buffer overflow. This may lead to corruption of the libvirt daemon's memory, potentially resulting in denial of service or local privilege escalation. A security update addressing this issue is available for Red Hat Enterprise Linux 9.4 and related variants.
CVE-2026-77014 is a numeric truncation vulnerability in libsoup's SoupServer HTTP Range header processing on Red Hat Enterprise Linux 10. The flaw causes a 64-bit subtraction result to be truncated to a 32-bit integer, flipping the sign for range offsets differing by more than INT_MAX. This leads to silent omission of requested byte ranges in HTTP 206 Partial Content responses for resources larger than approximately 2 GB. There is no confidentiality or availability impact, but integrity is affected at a low level. No mitigation or fix is currently available.
Multiple security vulnerabilities have been identified in Red Hat AI Inference Server 3.4.4 (rocm). These vulnerabilities are collectively addressed in the Red Hat AI Inference 3.4.4 release. The advisory lists several CVEs but does not provide detailed technical descriptions or specific fixes. No known exploits in the wild have been reported. The advisory does not explicitly confirm the availability of patches or fixes for these vulnerabilities.
Red Hat has issued an important security advisory for multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 8. The update addresses issues including dangling pointers, race conditions, memory counter updates, CRC overreads, double-free errors, and improper handling of allocated ranges. It also includes bug fixes and enhancements related to network interface controller stalls and resets. A system reboot is required to apply the update.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to multiple postgresql17 packages. The advisory addresses several vulnerabilities identified by CVE-2026-14663 and others. The update provides bug fixes and enhancements to these RPMs. A patch is available and should be applied to affected versions to mitigate the vulnerabilities.
A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to data owned by the calling cluster. An attacker could exploit this by crafting specific user identifiers (UIDs) with a different cluster's prefix.
CVE-2026-76139 is a high-severity supply chain vulnerability in Red Hat Advanced Cluster Management for Kubernetes 2.11. The acm-operator-bundle build process downloads and executes a script from a remote source without verifying its authenticity, exposing sensitive build credentials such as GitHub tokens and registry passwords. This flaw allows a remote attacker to inject malicious code, potentially compromising build resources and the integrity of the resulting operator bundle. Red Hat has not provided a patch or mitigation that meets their criteria for ease of use and applicability. The vulnerability is rated with a CVSS score of 8.0, indicating a high impact on confidentiality, integrity, and availability.