Loading story…
Red Hat released RHBA-2023:1050, updating the Red Hat Enterprise Linux 9 flatpak-sdk container image. The image incorporates backported fixes for security issues covered by RHSA-2023:0951, including Linux kernel flaws involving out-of-bounds access, use-after-free conditions, stack and integer overflows, and potential remote denial of service.
Organizations using the affected SDK image should upgrade to the updated or latest el9/flatpak-sdk image and rebuild all dependent container images. Red Hat said Dockerfiles and build scripts should be updated accordingly; the advisory applies to RHEL 9 deployments on x86_64, s390x, ppc64le, and aarch64 architectures.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHBA-2023:1050, updating the el9/flatpak-sdk container image with backported patches for security issues covered by RHSA-2023:0951. The advisory instructed users to upgrade the image and rebuild dependent container images.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **RHSA-2024:0461**, an Important RHEL 9 kernel update that remediates 17 vulnerabilities across networking, storage, graphics, Bluetooth, and virtualization components. The flaws include use-after-free, out-of-bounds access, integer-overflow, and NULL-pointer-dereference issues, including `CVE-2022-36402` in the `vmwgfx` graphics driver, which could let a local user with DRM-device access crash a host, and `CVE-2023-6679` in the DPLL subsystem, which can cause denial of service. The update applies to supported RHEL 9 variants on x86_64, ARM64, IBM Z, and Power little-endian systems; affected hosts require a reboot after installation. Red Hat also refreshed RHEL 9 container images through **RHBA-2024:0611** and Red Hat OpenStack Platform 17.1 container images through **RHBA-2024:0688**, incorporating the kernel security fixes and related remediation from RHSA-2024:0448. The container updates cover multiple RHEL 9 image variants, including EUS, AUS, SAP, extended-lifecycle, and four-year update offerings, and address issues such as eBPF-verification flaws and an AMD SEV-ES local privilege-escalation vulnerability. Organizations should pull the updated images, update base-image references in Dockerfiles and build automation, rebuild dependent images, and deploy the refreshed artifacts.
Aug 26, 2026
Red Hat released **RHSA-2024:8162**, a Moderate-severity update for Red Hat Enterprise Linux 9, remediating 14 Linux-kernel vulnerabilities across standard RHEL 9 and associated EUS, ELS, SAP, and CodeReady Linux Builder offerings. The fixes address issues including local information disclosure on Intel Atom processors, an out-of-bounds write in `sch_multiq`, a use-after-free condition in the Ionic driver, and several NULL-pointer dereference and networking flaws, including `CVE-2023-52658`, `CVE-2021-47385`, and `CVE-2024-35989`. Affected systems span x86_64, aarch64, ppc64le, and s390x architectures; administrators must reboot after installing the updated kernel. Red Hat also published refreshed RHEL 9 container images under RHBA-2024:8242, RHBA-2024:8412, RHBA-2024:8441, and RHBA-2024:8578, backporting the RHSA-2024:8162 kernel security fixes into UBI-derived, language-runtime, S2I, support-tools, and Go Toolset images. Organizations should pull the revised images from the Red Hat Container Registry, update base-image references in Dockerfiles and build scripts, and rebuild and redeploy all dependent container images.
Aug 26, 2026
Red Hat released kernel and container-image updates to remediate a broad set of Linux kernel vulnerabilities across **RHEL 8** and **RHEL 9**. The flaws include memory-safety defects, use-after-free and out-of-bounds conditions, NULL-pointer dereferences, race conditions, deadlocks, information disclosure, and denial-of-service risks across subsystems such as USB, HID, RDMA, networking, BPF, Bluetooth, filesystems, storage, graphics, and virtualization. Examples include `CVE-2024-26933`, a USB-core deadlock, `CVE-2024-26717`, a NULL dereference in the HID I2C driver, and `CVE-2024-26743`, an RDMA/qedr error-flow flaw. The fixes were delivered through RHEL kernel advisories including `RHSA-2024:9315` for RHEL 9, and through refreshed RHEL 8 base and middleware container images tied to `RHSA-2024:7000`, including Flatpak SDK, Go Toolset, Support Tools, Camel K Operator, and RHPAM Kogito Builder images. Organizations should apply the updated RHEL kernel packages and reboot affected hosts; for containers, pull the revised images, update Dockerfiles or build scripts to use current tags, and rebuild and redeploy all downstream images. Red Hat later corrected `RHSA-2024:9315` to remove `CVE-2023-52490`, which had been incorrectly listed as fixed, without changing the packages.
Aug 26, 2026