Loading story…
Red Hat released RHBA-2022:5088 for Red Hat OpenShift Enterprise ASYNC Stream container images, incorporating the Linux kernel security fixes in RHSA-2022:1988. The update affects OpenShift Container Platform 4.7 on RHEL 8 x86_64; Red Hat directed customers to upgrade the images and rebuild dependent container images.
The bundled fixes address, among other issues, CVE-2021-42739, a heap-based buffer overflow in the FireDTV driver's CA_SEND_MSG ioctl that could enable a local crash or privilege escalation, and CVE-2021-3669, a denial-of-service condition caused by non-scalable /proc/sysvipc/shm reads with exceptionally large shared-memory segment counts. Organizations unable to patch the FireDTV issue immediately can reduce exposure by preventing the firedtv kernel module from loading.
See real exploitation activity before you spend the cycle.
11 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHBA-2022:5088 for OpenShift Enterprise ASYNC Stream container images, incorporating the security fixes covered by RHSA-2022:1988 for affected OpenShift Container Platform 4.7 on RHEL 8 x86_64. Red Hat advised customers to upgrade the images and rebuild dependent container images.
Red Hat issued RHBA-2022:4630 to update CodeReady Workspaces 2.0 container images with backported security fixes from RHSA-2022:1988, including fixes for CVE-2021-42739 and CVE-2021-21781. Users were advised to upgrade the images and rebuild dependent container images.
Red Hat closed Bugzilla 1986473, its tracking record for CVE-2021-3669. The issue was addressed for RHEL 8 through RHSA-2022:1975 and RHSA-2022:1988.
Red Hat addressed CVE-2021-42739 in RHEL 8 through RHSA-2022:1975 and RHSA-2022:1988.
Red Hat issued RHEL 7 fixes for the FireDTV heap-buffer-overflow vulnerability through RHSA-2022:0063 and RHSA-2022:0065.
Red Hat closed Bugzilla 1951739, its tracking record for CVE-2021-42739. The recommended mitigation was to prevent the firedtv kernel module from loading.
Red Hat stated that CVE-2021-3669 had not been reported upstream and that patches were being developed. It assessed exploitation as having limited practical impact because it requires exceptionally large numbers of shared-memory segments.
Guilherme de Almeida Suckevicz reported CVE-2021-3669, in which non-scalable reads of /proc/sysvipc/shm with very large numbers of shared-memory segments can cause resource exhaustion and denial of service.
Guilherme de Almeida Suckevicz reported CVE-2021-21781, a medium-severity Linux ARM SIGPAGE flaw through which a local attacker could read signal-page contents at a specific process-memory offset and potentially disclose kernel-memory data.
Pedro Sampaio reported Red Hat Bugzilla 1951739 for CVE-2021-42739, a heap-based buffer overflow in the Linux FireDTV driver that a local user could trigger through the CA_SEND_MSG ioctl.
Fedora received a fix for the /proc/sysvipc/shm resource-exhaustion issue through 5.15.x kernel rebases.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released updated Red Hat Enterprise Linux 9 and OpenShift Dev Spaces 3 container images incorporating kernel security fixes from `RHSA-2025:2627`. The refreshed images cover x86_64, ARM64, IBM Z (`s390x`), and little-endian Power (`ppc64le`) variants, including applicable EUS, ELS, AUS, and SAP offerings. Red Hat instructed customers to update image references in Dockerfiles and automation and rebuild all dependent container images. The fixes include `CVE-2024-50302`, a Linux kernel HID-core vulnerability in which an uninitialized report buffer could expose kernel memory through a specially crafted HID report. The upstream remediation zero-initializes the buffer at allocation; the vulnerability was added to CISA's Known Exploited Vulnerabilities catalog. The advisories also backport fixes for additional kernel flaws involving null-pointer dereferences, use-after-free and dangling-pointer conditions, uninitialized buffers, and out-of-bounds access.
Aug 26, 2026
Red Hat released updated OpenShift Dev Spaces 3 container images through the Red Hat Container Registry, incorporating backported security fixes from `RHSA-2023:7077`. The updated dashboard, plugin-registry, and UDI images are available for `x86_64`, `ppc64le`, and `s390x`; organizations should upgrade the images and rebuild dependent container images. The remediation covers numerous Linux kernel issues, including `CVE-2022-3594`, which can let a remote attacker force excessive logging through the Realtek `r8152` USB Ethernet driver, and local denial-of-service flaws in the VMware graphics driver: `CVE-2022-40133` and `CVE-2022-38457`. It also includes `CVE-2022-45869`, a KVM race condition that can allow a low-privileged nested-virtualization guest user to crash or corrupt host memory. Where updates cannot be applied immediately, Red Hat recommends blacklisting unneeded `r8152` or `vmwgfx` kernel modules and disabling nested virtualization for the KVM issue.
Aug 26, 2026
Red Hat released updates for **Red Hat Enterprise Linux 8** to fix `CVE-2021-46939`, a moderate-severity Linux kernel tracing flaw that can recursively acquire a spin lock when tracing is re-entered through the function graph tracer. A local attacker or user able to trigger the affected tracing conditions could cause a system deadlock and denial of service, including during suspend/resume testing. Red Hat rated the issue CVSS 5.5; RHEL 9 is not affected, while RHEL 6 and 7 are outside the affected support scope. Red Hat also issued **RHSA-2024:5439** for OpenShift Container Platform 4.15, delivering version 4.15.28 with updated container images and packages. The release remediates the Linux kernel route-management use-after-free vulnerability `CVE-2024-36971`, Go `net/http` memory-exhaustion flaw `CVE-2023-45290`, and Go `net/netip` IPv4-mapped IPv6 address-handling issue `CVE-2024-24790`; it also updates Kubernetes to 1.28.12. OpenShift 4.15 customers on x86_64, s390x, ppc64le, and aarch64 should upgrade through their supported release channel or the OpenShift web console.
Aug 26, 2026