Loading story…
Red Hat released Important security updates for Red Hat OpenStack Platform 17.1 and 16.2 that address multiple flaws, including CVE-2026-33413, an etcd authorization bypass that can expose cluster information and enable denial-of-service conditions. The etcd issue affects versions before 3.4.42, 3.5.28, and 3.6.9, and can let unauthorized users access certain gRPC API functions such as MemberList, Alarm, and Lease, as well as trigger compaction operations that interfere with leases or delete historical revisions. Red Hat shipped the etcd fix in RHSA-2026:28047 for OpenStack Platform 17.1 on RHEL 9 x86_64 and included related remediation in RHSA-2026:54757 for OpenStack Platform 16.2 and associated products.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
On 2026-08-13, Red Hat published RHSA-2026:54757, an Important security advisory for Red Hat OpenStack Platform 16.2 (Train). The update fixes multiple vulnerabilities across Nova, Glance, Keystone, oslo.messaging, etcd, Go libraries, pyasn1, gRPC-Go, and Erlang OTP for x86_64 and IBM Power-related products.
On 2026-06-22, Red Hat Bugzilla documented that etcd versions prior to 3.4.42, 3.5.28, and 3.6.9 allow authorization bypass on certain gRPC API functions, enabling information disclosure and denial of service. The entry notes the issue was fixed upstream in those etcd versions and remediated by Red Hat in OpenStack Platform 17.1 and 16.2.
On 2026-06-22, Red Hat published RHSA-2026:28047, an Important security advisory for etcd in Red Hat OpenStack Platform 17.1 (Wallaby). The update provides patched etcd packages for RHEL 9 x86_64 and addresses CVE-2026-33413 along with multiple Go- and gRPC-related vulnerabilities.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourcebugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important updates for the `etcd` component in Red Hat OpenStack Platform 16.1 and 16.2 on RHEL 8, correcting incomplete OpenStack-specific fixes tracked as CVE-2024-4436, CVE-2024-4437, and CVE-2024-4438. CVE-2024-4438 left prior remediation for CVE-2023-39325 and the HTTP/2 Rapid Reset flaw, CVE-2023-44487, incomplete because the package compiled against the upstream `golang.org/x/net/http2` implementation rather than Red Hat's supplied version. The advisories also remediate Go vulnerabilities affecting HTTP/2, HTTP request resource consumption, TLS/QUIC post-handshake processing, and HTML template handling. Organizations running affected OpenStack deployments should install `etcd` version `3.3.23-16.el8ost` for `x86_64` or `ppc64le`; Red Hat also issued remediation for OpenStack Platform 17.1 on RHEL 9 through RHSA-2024:2729.
Aug 27, 2026
Red Hat released **RHSA-2022:5626** for Red Hat Enterprise Linux 8.4 Extended Update Support, delivering kernel `4.18.0-305.57.1.el8_4` for x86_64, s390x, ppc64le, and aarch64. The update remediates six kernel vulnerabilities, including **CVE-2022-32250**, a netfilter use-after-free write that can enable local root escalation, and **CVE-2022-1729**, affecting `perf_event_open`. It also addresses cgroup migration permission handling in **CVE-2021-4197**, which can let a less-privileged process induce a privileged process to write through an attacker-created file descriptor, and **CVE-2021-4203**, a socket credential race that can crash the system or disclose kernel information. Red Hat also issued **RHBA-2022:5744** to update Red Hat OpenStack Platform 16.2 container images, incorporating the kernel security fixes for x86_64 and IBM Power ppc64le deployments. Organizations should install the applicable RHEL kernel update and reboot hosts for remediation to take effect; OpenStack Platform users should upgrade the supplied container images and rebuild dependent images.
Aug 26, 2026
Red Hat released Important RHEL kernel updates addressing multiple Linux kernel flaws, including **CVE-2022-0492**, in which abuse of the cgroups v1 `release_agent` feature can enable local privilege escalation and bypass namespace isolation, creating a container-escape path. The upstream fix is tracked in commit `24f6008564183aa120d07c03d9289519c2fe02af`; related kernel issues include **CVE-2022-0847 (Dirty Pipe)**, file-descriptor handling defects, missing TLB flushing, usercopy use-after-free conditions, kernel memory read/write flaws, and TIPC denial of service. Affected updates include RHEL 8 kernel `4.18.0-348.20.1.el8_5` across x86_64, ARM64, IBM Z, and Power LE variants, as well as `kernel-rt` packages for RHEL 8.2 Real Time Telecommunications and NFV Telecommunications Update Service on x86_64. Organizations should apply the applicable updated kernel packages and reboot hosts to activate the fixes. Red Hat assessed OpenShift Container Platform clusters with SELinux enabled by default as protected against the CVE-2022-0492 container-escape and privilege-escalation path.
Aug 27, 2026