Red Hat Enterprise Linux 10/libkrun

Red Hat · Package

15 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review.	tokio Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	Rust / CargoRed Hat	Medium	Fix reported	2026-10-24
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)CVE-2026-53655 · GHSA-VMF3-W455-68VH	tar Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs	npmRed Hat	Medium	Fix reported	2026-09-10
tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHVersion ranges need review.	tar Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	Rust / CargoRed Hat	Medium	Fix reported	2026-09-10
kernel: Out of Bounds write in Linux CameraCVE-2026-25263	Red Hat Enterprise Linux 10/kernel Red Hat Enterprise Linux 10/libkrun	Red Hat	Medium	No fix reported	Not recorded
kernel: kernel: Memory corruption via integer overflow in Samsung Exynos NPU driverCVE-2026-68984	Red Hat Enterprise Linux 10/kernel Red Hat Enterprise Linux 10/libkrun	Red Hat	High	No fix reported	Not recorded
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versionsCVE-2026-41988	Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9	Red Hat	Low	No fix reported	Not recorded
bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted fileCVE-2026-42250	Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 OpenShift Lightspeed/openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9	Red Hat	Medium	No fix reported	Not recorded
kernel: octeontx2-af: CGX: add bounds check to cgx_speed_mbps indexCVE-2026-64225	Red Hat Enterprise Linux 10/kernel Red Hat Enterprise Linux 10/libkrun	Red Hat	Medium	No fix reported	Not recorded
kernel: batman-adv: bla: fix report_work leak on backbone_gw purgeCVE-2026-64218	Red Hat Enterprise Linux 10/libkrun Red Hat Enterprise Linux for NVIDIA 26/kernel	Red Hat	High	No fix reported	Not recorded
kernel: gpio: shared: fix deadlock on shared proxy's parent removalCVE-2026-64238	Red Hat Enterprise Linux 10/libkrun Red Hat Enterprise Linux for NVIDIA 26/kernel	Red Hat	Low	No fix reported	Not recorded
kernel: net: ethtool: phy: avoid NULL deref when PHY driver is unboundCVE-2026-64228	Red Hat Enterprise Linux 10/kernel Red Hat Enterprise Linux 10/libkrun	Red Hat	Low	No fix reported	Not recorded
kernel: regulator: tps65219: fix irq_data.rdev not being assignedCVE-2026-64230	Red Hat Enterprise Linux 10/libkrun Red Hat Enterprise Linux for NVIDIA 26/kernel	Red Hat	Low	No fix reported	Not recorded
kernel: ACPI: driver: Check ACPI_COMPANION() against NULL during probeCVE-2026-64227	Red Hat Enterprise Linux 10/kernel Red Hat Enterprise Linux 10/libkrun	Red Hat	Low	No fix reported	Not recorded
kernel: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change()CVE-2026-64538	Red Hat Enterprise Linux 10/kernel Red Hat Enterprise Linux 10/libkrun	Red Hat	Medium	No fix reported	Not recorded
nix: Nix: Arbitrary file truncation via time-of-check/time-of-use raceCVE-2026-64846	Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Confidential Compute Attestation/agent-sandbox/agent-sandbox-router	Red Hat	Low	No fix reported	Not recorded