{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-74860","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","state":"PUBLISHED","assignerShortName":"redhat","dateReserved":"2026-08-17T09:57:05.862Z","datePublished":"2026-09-08T11:27:45.158Z","dateUpdated":"2026-11-06T06:28:42.573Z"},"containers":{"cna":{"title":"Libxml2: double-free/uaf in libxml2 python bindings","metrics":[{"other":{"content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"descriptions":[{"lang":"en","value":"A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.12.5-10.el10_2.4","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/o:redhat:enterprise_linux:10.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.12.5-9.el10_0.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.1-6.el7_9.20","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/o:redhat:rhel_els:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-21.el8_10.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-21.el8_10.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-9.el8_4.20","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-9.el8_4.20","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-13.el8_6.24","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-13.el8_6.24","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-16.el8_8.24","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.7-16.el8_8.24","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.13-14.el9_8.5","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.13-14.el9_8.5","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.13-3.el9_2.20","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.13-13.el9_4.10","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.9.13-13.el9_6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"]},{"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"cert-manager/jetstack-cert-manager-rhel9","defaultStatus":"affected","versions":[{"version":"1790589912","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"]},{"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"cert-manager/cert-manager-istio-csr-rhel9","defaultStatus":"affected","versions":[{"version":"1790589914","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"]},{"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"cert-manager/cert-manager-operator-rhel9","defaultStatus":"affected","versions":[{"version":"1790589855","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"]},{"vendor":"Red Hat","product":"Red Hat Cost Management On-Premise 1","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"costmanagement/costmanagement-ui-rhel10","defaultStatus":"affected","versions":[{"version":"1791460851","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:cost_management_on_premise:1::el10"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"libxml2-main","defaultStatus":"affected","versions":[{"version":"2.15.4-0.1.hum1","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1793041986","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1793041981","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793042072","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1793042067","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793041987","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793329709","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1793328358","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-rocm-7.1-rhel9","defaultStatus":"affected","versions":[{"version":"1793042006","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1793042145","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793042006","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-gaudi-rhel9","defaultStatus":"affected","versions":[{"version":"1793042011","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1793042086","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793042088","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-rocm-6.4-rhel9","defaultStatus":"affected","versions":[{"version":"1793041995","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1793042074","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1793042008","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1793326837","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793042010","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793042162","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-gaudi-rhel9","defaultStatus":"affected","versions":[{"version":"1793042004","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-rubin-rhel9","defaultStatus":"affected","versions":[{"version":"1793042092","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1793042117","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1793042093","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1793042114","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-rocm-7.14-rhel9","defaultStatus":"affected","versions":[{"version":"1793042024","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1793042008","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1793327660","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/cds-kubernetes-rhel9","defaultStatus":"affected","versions":[{"version":"1791978534","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/cds-rhel9","defaultStatus":"affected","versions":[{"version":"1791978528","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/haproxy-rhel9","defaultStatus":"affected","versions":[{"version":"1791978528","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/installer-rhel9","defaultStatus":"affected","versions":[{"version":"1791964013","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/rhua-rhel9","defaultStatus":"affected","versions":[{"version":"1791978693","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"podman","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libxml2","defaultStatus":"unknown","cpes":["cpe:/o:redhat:rhel_els:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/podman","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"podman","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"swift-lang","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-kserve-controller-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-kserve-llmisvc-controller-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-llama-stack-k8s-operator-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-model-serving-api-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"podman","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 5","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:5"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:64463","name":"RHSA-2026:64463","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71585","name":"RHSA-2026:71585","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71586","name":"RHSA-2026:71586","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71641","name":"RHSA-2026:71641","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72470","name":"RHSA-2026:72470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72475","name":"RHSA-2026:72475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72476","name":"RHSA-2026:72476","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79357","name":"RHSA-2026:79357","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82939","name":"RHSA-2026:82939","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89750","name":"RHSA-2026:89750","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89759","name":"RHSA-2026:89759","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90309","name":"RHSA-2026:90309","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91202","name":"RHSA-2026:91202","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91204","name":"RHSA-2026:91204","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91206","name":"RHSA-2026:91206","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91207","name":"RHSA-2026:91207","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91217","name":"RHSA-2026:91217","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91218","name":"RHSA-2026:91218","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91219","name":"RHSA-2026:91219","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91224","name":"RHSA-2026:91224","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91232","name":"RHSA-2026:91232","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91233","name":"RHSA-2026:91233","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91234","name":"RHSA-2026:91234","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91235","name":"RHSA-2026:91235","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91236","name":"RHSA-2026:91236","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91237","name":"RHSA-2026:91237","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91238","name":"RHSA-2026:91238","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91241","name":"RHSA-2026:91241","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91242","name":"RHSA-2026:91242","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91243","name":"RHSA-2026:91243","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91244","name":"RHSA-2026:91244","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91245","name":"RHSA-2026:91245","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91246","name":"RHSA-2026:91246","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91248","name":"RHSA-2026:91248","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91249","name":"RHSA-2026:91249","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92352","name":"RHSA-2026:92352","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92589","name":"RHSA-2026:92589","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93463","name":"RHSA-2026:93463","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93473","name":"RHSA-2026:93473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93791","name":"RHSA-2026:93791","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94459","name":"RHSA-2026:94459","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94468","name":"RHSA-2026:94468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94474","name":"RHSA-2026:94474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94476","name":"RHSA-2026:94476","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74860","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529697","name":"RHBZ#2529697","tags":["issue-tracking","x_refsource_REDHAT"]}],"datePublic":"2026-03-08T09:20:00.000Z","problemTypes":[{"descriptions":[{"cweId":"CWE-763","description":"Release of Invalid Pointer or Reference","lang":"en","type":"CWE"}]}],"x_redhatCweChain":"CWE-763: Release of Invalid Pointer or Reference","timeline":[{"lang":"en","time":"2026-09-08T07:16:42.486Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-03-08T09:20:00.000Z","value":"Made public."}],"providerMetadata":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-11-06T06:28:42.573Z"},"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-08T12:08:31.722346Z","id":"CVE-2026-74860","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T12:11:11.416Z"}}]}}