Loading story…
Red Hat has announced significant advancements in integrating post-quantum cryptography (PQC) into its enterprise platforms, specifically Red Hat OpenShift 4.20 and Red Hat Enterprise Linux (RHEL) 9.7. These updates introduce support for new cryptographic algorithms designed to withstand attacks from both classical and quantum computers, addressing the looming threat posed by quantum computing to traditional public-key cryptosystems such as RSA and elliptic curve cryptography. In OpenShift 4.20, PQC support is being implemented in core Kubernetes control plane components, leveraging the Go 1.24 release's hybrid key exchange mechanism, while RHEL 9.7 serves as a critical stepping stone for organizations preparing for a full transition to post-quantum security in RHEL 10.
These enhancements allow organizations to proactively test and adapt to PQC within their existing infrastructure, minimizing disruption ahead of the anticipated "Q-Day" when quantum computers may render current encryption obsolete. Red Hat emphasizes the importance of early adoption, as backporting these advanced cryptographic algorithms to older software versions is not feasible. By starting with RHEL 9.7, enterprises can gain practical experience with PQC, identify necessary adjustments, and ensure a smoother migration path to future-proof their security posture against quantum threats.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Red Hat published a blog post on preparing for a post-quantum future with Red Hat Enterprise Linux 9.7, indicating new guidance or support related to post-quantum cryptography for that release. The event is dated from the publication date in the reference.
Red Hat published a blog post providing a deeper look at post-quantum cryptography support in the Red Hat OpenShift 4.20 control plane. The reference indicates this disclosure was made publicly on the publication date.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released container-image and platform updates across its Kubernetes portfolio to remediate vulnerabilities in Go dependencies, chiefly **CVE-2024-45337** in `golang.org/x/crypto/ssh` and **CVE-2024-45338** in `golang.org/x/net/html`. The SSH issue can enable authorization bypass when applications misuse `ssh.ServerConfig.PublicKeyCallback`; the HTML flaw involves non-linear parsing of case-insensitive content. Affected products include OpenShift Container Platform 4.15 and 4.18, Advanced Cluster Management 2.9.6, Multicluster Global Hub 1.2 and 1.3, Gatekeeper 3.14 and 3.15, OpenShift Data Foundation 4.15, VolSync 0.10 and 0.11, and Advanced Cluster Security (RHACS) 4.4 and 4.5. Several releases also address **CVE-2024-53259**, a `quic-go` denial-of-service flaw in which forged ICMP Packet Too Large messages can disrupt established QUIC connections, and RHACS 4.6.2 fixes `go-git` argument injection (**CVE-2025-21613**) and malicious Git-server reply denial of service (**CVE-2025-21614**). Red Hat recommends upgrading affected platforms and container images through their supported release channels, including deployments on x86_64, aarch64, ppc64le, and s390x where applicable; RHACS customers should move to 4.4.8, 4.5.6, or 4.6.2 according to their release stream.
Aug 27, 2026
Red Hat released **OpenShift Container Platform 4.16.25** and **4.17.7** with fixes for `CVE-2024-7409`, a QEMU flaw that can let an unauthenticated remote attacker crash a temporary Network Block Device (NBD) server during storage migration. An attacker can open a second socket, stall its NBD handshake before TLS negotiation, and trigger socket closure after the temporary server stops; the condition is reachable even where the NBD server requires valid TLS credentials. The OpenShift 4.16.25 update also remediates `CVE-2024-10963` in PAM/pam_access and `CVE-2024-24968` in microcode_ctl, while version 4.17.7 additionally fixes `CVE-2024-10963`, sensitive-information logging in `go-retryablehttp` (`CVE-2024-6104`), and a regular-expression DoS in `cross-spawn` (`CVE-2024-21538`). Red Hat also issued fixes for affected RHEL 8 and 9 variants; administrators should upgrade OpenShift through the appropriate release channel and apply the relevant Red Hat errata.
Aug 27, 2026
Red Hat released a series of **Important** security updates for Red Hat Enterprise Linux and OpenShift Container Platform to address Linux kernel vulnerabilities including `CVE-2025-40026` in **KVM on x86** and `CVE-2026-52923` in the **SysV IPC checkpoint/restore path**. The KVM flaw affects nested virtualization: after KVM has allowed an L2 guest I/O operation, changes to L1 or host userspace I/O interception during the userspace exit can cause KVM to wrongly re-check intercepts, leave `vcpu->arch.pio.count` non-zero, trigger a `WARN`, and disrupt guest execution. The IPC flaw stems from `ipc_idr_alloc()` passing `ids->next_id` to `idr_alloc()` without enforcing the valid `ipc_mni` range, allowing out-of-range allocation, stale IDR entries, and a potential use-after-free during `/proc/sysvipc/shm` traversal. Affected fixes were published across multiple product streams, including **RHEL 8.4**, **RHEL 8.8**, **RHEL 9.4**, **RHEL 9.6**, and **OpenShift Container Platform 4.18.53**, alongside other kernel CVEs such as `CVE-2025-10263`, `CVE-2026-31787`, and `CVE-2026-53059`. Red Hat rated both headline issues as **Moderate**, but noted that `CVE-2026-52923` has been associated with a reported local privilege-escalation exploit targeting **RHEL 10**, while `CVE-2025-40026` can be mitigated by disabling nested virtualization for `kvm_intel` and `kvm_amd`. Red Hat said updated kernel packages and release images are available for multiple architectures and advised customers to **reboot systems after applying kernel updates** and upgrade OpenShift clusters through the supported release channels.
Aug 25, 2026