Red Hat OpenShift Container Platform 5.0 vulnerabilities

2 known vulnerabilities in Red Hat OpenShift Container Platform 5.0 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  libkcapi: Use After Free

  CVE-2026-71226Aug 5, 2026Stephan Muelle

  Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

• 7.3 High severity

  Red Hat Enterprise Linux 9: UNIX Symbolic Link (Symlink) Following

  CVE-2026-12080Jul 20, 2026Red Hat

  A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or