Red Hat OpenShift Container Platform (kubelet, cri-o, kube-apiserver): Schwachstelle ermöglicht Denial of Service
WID-SEC-2026-1950 · first 17.06.2026 · updated 24.09.2026 · CVSS 6,5
What it is about
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud. Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.
Under what conditions?
Over the network, but only with valid access (login required), for example with stolen credentials or as an insider.
What can happen in the worst case
An attacker could use the vulnerability to
- einen Denial of Service Angriff durchzuführen
Am I affected?
Affected according to the BSI:
- Red Hat Enterprise Linux
- Fedora Linux
- SUSE Linux
- Red Hat OpenShift Container Platform
- Red Hat OpenShift Container Platform <4.22
- Red Hat OpenShift Container Platform 4.20.27.
- Red Hat OpenShift Container Platform release 4.21.22
- Red Hat OpenShift Container Platform <4.19.36
- Red Hat OpenShift Container Platform <4.22.4
- Red Hat OpenShift OpenShift Container Platform 4.20.29
- Red Hat OpenShift Container Platform 4.20.33
- Red Hat OpenShift Data Foundation
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Red Hat OpenShift Container Platform 4.22
- Red Hat OpenShift Container Platform 4.19.36
- Red Hat OpenShift Container Platform 4.22.4
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Red Hat Security Advisory RHSA-2026:25207 vom 2026-06-16 access.redhat.com
- Red Hat Security Advisory RHSA-2026:25009 vom 2026-06-17 access.redhat.com
- Red Hat Security Advisory RHSA-2026:25201 vom 2026-06-17 access.redhat.com
- SUSE Security Update SUSE-SU-2026:2460-1 vom 2026-06-19 lists.suse.com
- Red Hat Security Advisory RHSA-2026:27010 vom 2026-06-23 access.redhat.com
- Red Hat Security Advisory RHSA-2026:27004 vom 2026-06-24 access.redhat.com
- Fedora Security Advisory FEDORA-2026-DC2CBC1BC8 vom 2026-06-27 bodhi.fedoraproject.org
- Red Hat Security Advisory RHSA-2026:33078 vom 2026-06-29 access.redhat.com
- Red Hat Security Advisory RHSA-2026:29801 vom 2026-06-30 access.redhat.com
- Red Hat Security Advisory RHSA-2026:29835 vom 2026-06-30 access.redhat.com
- Red Hat Security Advisory RHSA-2026:29795 vom 2026-06-30 access.redhat.com
- Red Hat Security Advisory RHSA-2026:29858 vom 2026-07-01 access.redhat.com
- Red Hat Security Advisory RHSA-2026:29857 vom 2026-07-01 access.redhat.com
- Red Hat Security Advisory RHSA-2026:29865 vom 2026-07-01 access.redhat.com
- Red Hat Security Advisory RHSA-2026:36796 vom 2026-07-08 access.redhat.com
- SUSE Security Update SUSE-SU-2026:2804-1 vom 2026-07-09 lists.suse.com
- Red Hat Security Advisory RHSA-2026:34100 vom 2026-07-09 access.redhat.com
- Red Hat Security Advisory RHSA-2026:34755 vom 2026-07-09 access.redhat.com
- Red Hat Security Advisory RHSA-2026:34050 vom 2026-07-09 access.redhat.com
- Red Hat Security Advisory RHSA-2026:34099 vom 2026-07-09 access.redhat.com
- Red Hat Security Advisory RHSA-2026:34794 vom 2026-07-14 access.redhat.com
- Red Hat Security Advisory RHSA-2026:37187 vom 2026-07-14 access.redhat.com
- Red Hat Security Advisory RHSA-2026:37629 vom 2026-07-14 access.redhat.com
- Red Hat Security Advisory RHSA-2026:37581 vom 2026-07-15 access.redhat.com
- Red Hat Security Advisory RHSA-2026:37193 vom 2026-07-15 access.redhat.com
and 22 more sources in the original advisory
CVE: CVE-2026-35469
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.