18251 matches found
RHCOS 4 : OpenShift Container Platform 4.19.25 (RHSA-2026:3391)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3391 advisory. - runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects...
RHCOS 4 : OpenShift Container Platform 4.16.55 (RHSA-2026:0418)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0418 advisory. - runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 - runc: container escape with malicious...
RHCOS 4 : OpenShift Container Platform 4.15.61 (RHSA-2026:1540)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:1540 advisory. - runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 - runc: container escape with malicious...
RHCOS 4 : OpenShift Container Platform 4.17.47 (RHSA-2026:0701)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0701 advisory. - runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 - runc: container escape with malicious...
openSUSE 16 Security Update : container-suseconnect (openSUSE-SU-2026:20628-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20628-1 advisory. Changes in container-suseconnect: - switch to build with go 1.25 Tenable has extracted the preceding description block directly from the SUSE security...
RHCOS 4 : OpenShift Container Platform 4.17.50 (RHSA-2026:3416)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3416 advisory. - runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects...
RHCOS 4 : OpenShift Container Platform 4.15.62 (RHSA-2026:4418)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4418 advisory. - golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 - github.com/sirupsen/logrus:...
RHCOS 4 : OpenShift Container Platform 4.12.84 (RHSA-2026:0315)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0315 advisory. - runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 - runc: container escape with malicious...
RHCOS 4 : OpenShift Container Platform 4.18.34 (RHSA-2026:2975)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2975 advisory. - runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects CVE-2025-528...
RHCOS 4 : OpenShift Container Platform 4.19.1 (RHSA-2025:9279)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9279 advisory. - net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Note that Nessus has not tested for this...
SUSE SLES16 Security Update : container-suseconnect (SUSE-SU-2026:21405-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:21405-1 advisory. Changes in container-suseconnect: - switch to build with go 1.25 Tenable has extracted the preceding description block directly from the SU...
RHCOS 4 : OpenShift Container Platform 4.18.19 (RHSA-2025:9726)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9726 advisory. - podman: podman missing TLS verification CVE-2025-6032 Note that Nessus has not tested for this issue but has instead relied only on the...
RHCOS 4 : OpenShift Container Platform 4.13.63 (RHSA-2026:0676)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0676 advisory. - runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 - runc: container escape with malicious...
Security Bulletin: IBM App Connect Enterprise Certified Container operator and IntegrationRuntime & IntegrationServer operands are vulnerable to loss of confidentiality (CVE-2026-27137) and denial of service (CVE-2026-27138)
Summary IBM App Connect Enterprise Certified Container operator and IntegrationRuntime & IntegrationServer operands are vulnerable to loss of confidentiality CVE-2026-27137 and denial of service CVE-2026-27138. This bulletin provides patch information to address the reported vulnerability in Gola...
RHSA-2026:10096 Red Hat Security Advisory: OpenShift Container Platform 4.16.60 packages and security update
Bulletin has no description...
Exploit for CVE-2026-31431
Porting CVE-2026-31431 "Copy Fail" to a Constrained Java Run...
Statement on Local Privilege Escalation Vulnerability (CVE-2026-31431) "Copy Fail" on Linux Kernel
Following the local privilege escalation vulnerability CVE-2026-31431 "Copy Fail" on Linux Kernel, Huawei has launched an immediate investigation. Successful exploitation of this vulnerability allows attackers to escalate the local privilege to root or perform container escape. The investigation ...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from container operations in perf/x86 that may result in out-of-bounds memory reads. The following versions are...
PT-2026-37148
Name of the Vulnerable Software and Affected Versions Incus versions prior to 7.0.0 Description An authenticated user with permissions to import instance backups can crash the Incus daemon using a specially crafted backup archive. The issue occurs because the backup.GetInfo function trusts the...