huzaifas-sidhpurwala/RedHat-security-VeX huggingface dataset:
Wireshark: Denial of Service vulnerability in BLF file parser
CVE: CVE-2026-0961
Component: Wireshark
CWE: CWE-787
Severity: Moderate
CVSS v3: 5.4/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Release date: 2026-01-14T20:23:48.832000+00:00

A flaw was found in Wireshark. This vulnerability allows an attacker to trigger a crash in the BLF file parser by providing a specially crafted file. Successful exploitation leads to a denial of service (DoS), making the application unavailable to legitimate users.

Statement: This vulnerability is rated Moderate for Red Hat. An out-of-bounds write flaw in the Wireshark BLF file parser can lead to a denial of service. This issue requires user interaction, as an attacker would need to trick a user into opening a specially crafted BLF file.

Remediation:
To mitigate this issue, users should avoid opening or processing untrusted BLF (Binary Logging Format) files with Wireshark. Exercise caution when handling BLF files from unknown or unverified sources to prevent potential denial of service attacks.
audit: add missing syscalls to read class
CVE: CVE-2026-23241
Component: kernel
CWE: CWE-693
Severity: Moderate
CVSS v3: 5.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Release date: 2026-03-17T00:00:00+00:00

No description is available for this CVE.

Statement: Audit rules for the read class could be bypassed because getxattrat and listxattrat were not included in the audit read syscall set. A local process can read extended attributes using the at variants and avoid triggering audit watches such as file path rules configured for reads. Impact is limited to the situations where could be reduced security monitoring and potential evasion of audit based detection and compliance controls.

Remediation:
Timelion: Kibana Timelion Plugin: Denial of Service via improper input validation in Timelion expressions
CVE: CVE-2026-26940
Component: Kibana
CWE: CWE-1284
Severity: Moderate
CVSS v3: 6.7/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-03-19T17:14:31.734000+00:00

A flaw was found in the Timelion visualization plugin in Kibana. An authenticated user can exploit this by sending a specially crafted Timelion expression. This expression overwrites internal series data properties with an excessively large quantity value. This improper validation of input quantity can lead to a Denial of Service (DoS) by causing excessive memory allocation, making the service unavailable.

Statement: This is a MODERATE impact denial of service flaw in the Kibana Timelion visualization plugin. An authenticated user can exploit this by sending a specially crafted Timelion expression, leading to excessive memory allocation and service unavailability. This vulnerability requires an authenticated user to trigger the flaw.

Remediation:
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Broken Object Level Authorization Leading to Cross-User AI Conversation Context Injection in Ansible Lightspeed API
CVE: CVE-2026-0598
Component: ansible-lightspeed
CWE: CWE-283
Severity: Moderate
CVSS v3: 4.3/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Release date: 2026-02-06T00:00:00+00:00

A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. The APIs do not properly verify whether a conversation identifier belongs to the authenticated user making the request. As a result, an attacker with valid credentials could access or influence conversations owned by other users. This exposes sensitive conversation data and allows unauthorized manipulation of AI-generated outputs.

Statement: This vulnerability is rated Moderate for Red Hat. The flaw in Ansible Lightspeed API conversation endpoints allows an authenticated attacker to access or influence other users' AI chat sessions due to improper ownership validation of conversation identifiers. This can lead to unauthorized information disclosure and manipulation of AI-generated outputs.

Remediation:
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Resource exhaustion via WebSocket endpoint
CVE: CVE-2026-23538
Component: feast
CWE: CWE-770
Severity: Important
CVSS v3: 7.5/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-03-20T00:00:00+00:00

A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication. By opening a large number of simultaneous connections, an attacker can exhaust server resources—such as memory, CPU, and file descriptors—leading to a complete denial of service for legitimate users.

Statement: This Important vulnerability in the Feast Feature Server, a component of Red Hat OpenShift AI, could allow an unauthenticated, remote attacker to establish numerous WebSocket connections. This can lead to resource exhaustion and a denial of service for legitimate users.

Remediation:
flex_proportions: make fprop_new_period() hardirq safe
CVE: CVE-2026-23168
Component: kernel
CWE: CWE-833
Severity: Moderate
CVSS v3: 5.6/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-02-14T00:00:00+00:00

A deadlock vulnerability was found in the Linux kernel's flexible proportions (fprop) code used for I/O writeback accounting. When a hardirq interrupts the seqcount write section in fprop_new_period() during softirq context, a reader in the hardirq handler can spin indefinitely waiting for the odd sequence number to become even, causing a system hang.

Statement: This deadlock primarily affects FUSE filesystems that configure maximum writeback throughput fractions. Standard local filesystems rarely trigger this condition. The issue results in a denial of service (system hang) but cannot be exploited for code execution or data compromise.

Remediation:
django-allauth: Open redirect via crafted URL in SAML IdP initiated SSO
CVE: CVE-2026-27982
Component: django-allauth
CVSS v3: 4.2/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Release date: 2026-03-05T05:31:25.711000+00:00

A flaw was found in django-allauth. This open redirect vulnerability exists when Security Assertion Markup Language (SAML) Identity Provider (IdP) initiated Single Sign-On (SSO) is enabled, which is disabled by default. A remote attacker could exploit this by crafting a malicious URL, potentially redirecting users to an arbitrary external website. This could lead to information disclosure or phishing attacks.

Statement: MODERATE: This open redirect vulnerability in django-allauth affects systems where SAML IdP initiated SSO is explicitly enabled. By default, SAML IdP initiated SSO is disabled, which limits the exposure for Red Hat products. Systems with the default configuration are not affected.

Remediation:
quay: quay: Server-side Request Forgery via open redirect vulnerability in web interface
CVE: CVE-2026-2376
Component: mirror-registry
CWE: CWE-601
Severity: Moderate
CVSS v3: 4.7/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Release date: 2026-03-03T19:28:15.377000+00:00

A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended internal or restricted systems by providing malicious web addresses. 

When the application processes these addresses, it automatically follows redirects without verifying the final destination, allowing attackers to route requests to systems they should not have access to.


Remediation:
OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
CVE: CVE-2026-22796
Component: openssl
CWE: CWE-1287
Severity: Low
CVSS v3: 5.8/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-01-27T00:00:00+00:00

A flaw was found in OpenSSL. This type confusion vulnerability allows a remote attacker to cause a denial of service (DoS) by providing specially crafted PKCS#7 data to an application that performs signature verification. The vulnerability occurs because the application accesses an ASN1_TYPE union member without proper type validation, leading to an invalid or NULL pointer dereference and a crash.

Statement: This vulnerability is rated Low for Red Hat products. A type confusion flaw in the legacy PKCS#7 API can lead to a Denial of Service when processing specially crafted PKCS#7 data. Exploitation requires an application to perform signature verification of malformed PKCS#7 data. Red Hat products utilizing the FIPS module are not affected as the PKCS#7 parsing is outside the module boundary.

Remediation:
Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html
The containers required to run Discovery can be installed through discovery-installer
RPM. See the official documentation for more details.
The Insights proxy container image provided here is downloaded by the Red Hat
Insights proxy product RPM.

Before applying this update, make sure all previously released errata relevant to
your system have been applied.
The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.
See the official documentation for more details.
The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.
See the official documentation for more details.
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability
CVE: CVE-2026-23884
Component: freerdp
CWE: CWE-416
Severity: Important
CVSS v3: 7.5/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Release date: 2026-01-19T17:20:40.149000+00:00

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious server can exploit this vulnerability when a client connects to it. Specifically, offscreen bitmap deletion can lead to a use-after-free (UAF) condition, where the client attempts to use memory that has already been deallocated. This can cause a crash, resulting in a Denial of Service (DoS), and potentially lead to heap corruption with a risk of arbitrary code execution.

Statement: For this vulnerability to be exploited, a client must connect to a maliciously-configured server. Red Hat recommends that FreeRDP clients are only used to connect to trusted servers.

Remediation:
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
CVE: CVE-2026-23187
Component: kernel
CWE: CWE-805
Severity: Moderate
CVSS v3: 6.7/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Release date: 2026-02-14T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains

Fix out-of-range access of bc->domains in imx8m_blk_ctrl_remove().


Remediation:
HTSlib: Denial of Service via NULL pointer dereference in CRAM decoding
CVE: CVE-2026-31964
Component: htslib
CVSS v3: 5.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Release date: 2026-03-18T18:27:26.099000+00:00

A flaw was found in HTSlib, a library for reading and writing bioinformatics file formats. When processing specially crafted CRAM (Compressed Reference-aligned Alignment Map) data, specifically records that omit sequence or quality data using the CONST, XPACK, or XRLE encodings, the library attempts to write to a NULL pointer. This NULL pointer dereference can cause the program to crash, leading to a Denial of Service (DoS).

Statement: This MODERATE NULL pointer dereference in HTSlib's CRAM decoder affects the CONST, XPACK, and XRLE encodings when processing records with omitted data. Exploitation requires local access and user interaction. Impact is limited to availability (crash/DoS) with no confidentiality or integrity impact. Affects htslib and python-pysam in EPEL and Fedora. Fixed in versions 1.23.1, 1.22.2, and 1.21.1.

Remediation:
Devalue: Denial of Service or type confusion via prototype pollution
CVE: CVE-2026-30226
Component: devalue
CWE: CWE-843
Severity: Moderate
CVSS v3: 5.8/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-03-11T17:47:40.016000+00:00

A flaw was found in the Svelte devalue JavaScript library. A remote attacker could exploit a prototype pollution vulnerability by sending maliciously crafted payloads to the devalue.parse or devalue.unflatten functions. Successful exploitation of this flaw could lead to a Denial of Service (DoS) condition, making the affected system unavailable, or result in type confusion, which could have further unpredictable impacts.


Remediation:
CVE: CVE-2026-0783
Component: ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability
Release date: 2026-01-09T15:54:36.487000+00:00

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.

The specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28292.

Statement: Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

Remediation:
A website may be able to track users through Safari web extensions
CVE: CVE-2026-20676
Component: webkitgtk
CWE: CWE-201
Severity: Moderate
CVSS v3: 6.4/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Release date: 2026-03-18T00:00:00+00:00

A flaw was found in WebKitGTK. A malicious website can track users through web extensions due to improper state management.

Statement: To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. Due to this reason, this flaw has been rated with a moderate severity.

Remediation:
Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.

In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.

This vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.

To mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.

Additionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.
Thread Pooling unspecified vulnerability (CPU Jan 2026)
CVE: CVE-2026-21964
Component: mysql
Severity: Moderate
CVSS v3: 5.9/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-01-20T00:00:00+00:00

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Statement: Red Hat Product Security rates the severity of this flaw as determined by the Oracle MySQL Critical Patch Update.

Remediation:
WordPress: Unauthorized access to post notes via improper REST API permission check
CVE: CVE-2026-3906
Component: wordpress
CVSS v3: 4.5/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Release date: 2026-03-11T09:25:44.130000+00:00

A flaw was found in WordPress. Authenticated attackers with Subscriber-level access can exploit this flaw by creating notes on any post, including those authored by other users or private posts. This is due to an improper permission check in the REST API `create_item_permissions_check()` method. This leads to unauthorized information disclosure and potential integrity issues within the platform.

Statement: Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

Remediation:
fbdev: smscufx: properly copy ioctl memory to kernelspace
CVE: CVE-2026-23236
Component: kernel
Severity: None
Release date: 2026-03-04T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

fbdev: smscufx: properly copy ioctl memory to kernelspace

The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from
userspace to kernelspace, and instead directly references the memory,
which can cause problems if invalid data is passed from userspace.  Fix
this all up by correctly copying the memory before accessing it within
the kernel.


Remediation:
CairoSVG: Denial of Service via recursive <use> element amplification
CVE: CVE-2026-31899
Component: CairoSVG
CVSS v3: 7.5/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-03-13T19:38:43.990000+00:00

A flaw was found in CairoSVG, an SVG converter. A remote attacker could exploit this vulnerability by submitting a specially crafted SVG file that contains recursive `<use>` elements. This can lead to an exponential increase in processing time and CPU exhaustion, resulting in a Denial of Service (DoS) for the system.

Statement: This is an IMPORTANT denial of service vulnerability in CairoSVG, affecting systems that process untrusted SVG input. The flaw allows an attacker to trigger exponential CPU exhaustion through recursive `<use>` element amplification. Red Hat products that include `python-cairosvg` and process untrusted SVG content are affected.

Remediation:
ImageMagick: Memory corruption and denial of service via signed integer overflow in SIXEL decoder.
CVE: CVE-2026-25970
Component: ImageMagick
CWE: CWE-190
Severity: Moderate
CVSS v3: 5.3/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Release date: 2026-02-24T01:35:36.727000+00:00

A flaw was found in ImageMagick. A remote attacker can exploit a signed integer overflow vulnerability in the SIXEL decoder by providing a maliciously crafted SIXEL image file. This vulnerability occurs during buffer reallocation operations and can lead to memory corruption and a denial of service (DoS) condition.

Statement: This MODERATE impact vulnerability in ImageMagick's SIXEL decoder can lead to memory corruption and denial of service. It affects Red Hat Enterprise Linux 6 ELS and 7 ELS when processing a specially crafted SIXEL image file. Exploitation requires an attacker to provide a malicious image for processing.

Remediation:
To mitigate this vulnerability, avoid processing untrusted SIXEL image files with ImageMagick. If ImageMagick is used in an environment where it processes external or untrusted input, consider implementing sandboxing mechanisms to limit the potential impact of a successful exploit.
nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
CVE: CVE-2026-23148
Component: kernel
CWE: CWE-367
Severity: Moderate
CVSS v3: 5.9/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-02-14T00:00:00+00:00

A race condition vulnerability was found in the NVMe target (nvmet) subsystem. In nvmet_bio_done(), the bio completion callback can re-queue and re-submit a request using the same inline_bio before bio_uninit() is called. When bio_uninit() subsequently sets bio->bi_blkg to NULL, the re-submitted bio causes a NULL pointer dereference in blk_cgroup_bio_start().

Statement: This vulnerability affects systems running as NVMe-oF (NVMe over Fabrics) targets. Exploitation requires specific timing between bio completion and re-submission, making it difficult to trigger reliably. The impact is denial of service via kernel crash rather than privilege escalation.

Remediation:
Insufficient validation of untrusted input in Navigation
CVE: CVE-2026-4451
Component: chromium-browser
CVSS v3: 8.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Release date: 2026-03-18T00:00:00+00:00

An insufficient validation of untrusted input flaw was found in the Navigation component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=487768779

Statement: Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Remediation:
nvme-fc: release admin tagset if init fails
CVE: CVE-2026-23261
Component: kernel
Severity: Moderate
CVSS v3: 5.6/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Release date: 2026-03-18T00:00:00+00:00

No description is available for this CVE.


Remediation:
node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation
CVE: CVE-2026-26960
Component: tar
CWE: CWE-22
Severity: Moderate
CVSS v3: 7.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Release date: 2026-02-20T01:07:52.979000+00:00

A flaw was found in node-tar. An attacker can craft a malicious archive that, when extracted with default options, creates a hardlink outside the intended extraction directory. This vulnerability allows the attacker to perform arbitrary file read and write operations as the user extracting the archive, bypassing existing path protections. This can lead to unauthorized access and modification of sensitive system files.


Remediation:
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
tinytag: Denial of Service via malicious MP3 file parsing
CVE: CVE-2026-32889
Component: tinytag
CWE: CWE-835
Severity: Moderate
CVSS v3: 6.4/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Release date: 2026-03-20T02:23:25.079000+00:00

A flaw was found in tinytag, a Python library for reading audio file metadata. An attacker who can supply specially crafted MP3 files for parsing can trigger a non-terminating loop within the library. This can cause the parsing operation to stop making progress, leading to a Denial of Service (DoS) where the affected process becomes unresponsive until terminated.


Remediation: