P5Verified

Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

CVE-2026-39835, CVE-2026-46597 affects openshift. EPSS 0.00662 (percentile 0.49902), scored 2026-10-03. Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8. Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8. Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9. Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9. Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9. Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9. Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9.

CVE: CVE-2026-39835, CVE-2026-46597
Product: openshift
CCR priority: 0.2 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N · OSV.dev
EPSS: 0.00662 · percentile 0.49902 · 2026-10-03
KEV: no

Affected products

openshift · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8
openshift-hyperkube · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el8
openshift · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9
openshift-hyperkube · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9
openshift-kube-apiserver · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9
openshift-kube-controller-manager · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9
openshift-kube-scheduler · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9
openshift-kubelet · Fixed version: 0:4.22.0-202608010430.p2.g5f1e0e7.assembly.stream.el9

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-39835.html