VDB
RHSA-2026%3A24539
RHSA-2026%3A24539
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Apache Thrift c_glib language bindings. A remote attacker could send specially crafted requests to a c_glib-based Thrift server, leading to a mismatched memory management routines vulnerability. This could cause the server to crash with a "free(): invalid pointer" error, resulting in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhacm2/console-rhel9@sha256:496cc8818d597e2140d4a8f806c5309db6daf22e64e7115a13ec825586a3ff48_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:83a4167d9ac47c0b2dd2d02afb3528401877a4411dc05e121f56e1e447694b32_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:0e641eeb2a17e10d084d0761451d15c6efff2d003fd76ca608fe00aec1436e57_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/thanos-rhel9@sha256:49f39301f9061a446b9c8ca753b028a20ace99709218d46bd31ae21017e025e2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/search-collector-rhel9@sha256:768b693c220fad9a9f05444d8de118a6fdbd40d78f99fd85d320c54f138fbeac_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/insights-client-rhel9@sha256:4a4b169b914358e014c9f6d16efc0f4d91b14c8ad483747645ce21a81f885d1c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:139ffe390724d092b2d35f961236de3164f3e49938b0c6de9d3180b73208f2a2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ec976a44c422213acc9883b210e3a3de2ef33bbf612d0c966c8aa1c11fcb38e9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:19eca46c7ce8fa9940078d94f2919e8da4d13aa7014bafec297ec261654dc9da_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:ab0fd26252ed6e3777ebef9114c6a84c8a2ac38d9ac7c2e6d057b25f31c4da86_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:b4b5a6f032c18ca6e1dd85db61475ff7913764941e8601cb9e18d2fd38a5a7c5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:504b27bcace40e21bf5be1ec132f2e55496a67f2ab4193d246d617b66986f943_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:f338368e0aa61d6a74219c879052c772c6412981b405344f21449d21bcd458c8_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/search-collector-rhel9@sha256:110e417cd9e7cb81349c0e6b5fbdcd54be0c659e7059331ad6710f1860cefdcc_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:c34916a6e48b92dc6abd0880932259a110105b733f76b895d380ed100a116120_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:551dd10a8f49937d0c8b6155937b8ecaefdceb60fe5b60ef333a1cdc6fcf3e6b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:a31e278dc4f07dfefe6295b26ac350536f90ea740a1a92720eeb89df45b210d6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8146260cfa32404c1f32bc6ba61eb7145daa4566d651e5f5a846c854071cfac4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:d86fdba4dceb045db1df4bb31f8ed6024c05cb25b68b2d515b30b67158aa048f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
| Red Hat | registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:1ce576a060ae26a2927461b5dbf7c50046600dfcd0a630544fe0682baf03981d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15 | * |
…and 164 more
Timeline
- Jun 8, 2026 CVE Published
- Jun 9, 2026 CVE Updated
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Security Advisory
- Jun 9, 2026 Security Advisory
- Jun 9, 2026 Security Advisory
- Jun 9, 2026 Security Advisory
- Jun 9, 2026 Security Advisory
- Jun 9, 2026 Security Advisory
- Jun 9, 2026 Security Advisory
- Jun 9, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:24539 advisory
- https://access.redhat.com/security/cve/CVE-2025-48431 advisory
- https://access.redhat.com/security/cve/CVE-2026-33815 advisory
- https://access.redhat.com/security/cve/CVE-2026-33816 advisory
- https://access.redhat.com/security/cve/CVE-2026-40293 advisory
- https://access.redhat.com/security/cve/CVE-2026-40890 advisory
- https://access.redhat.com/security/cve/CVE-2026-40895 advisory
- https://access.redhat.com/security/cve/CVE-2026-41602 advisory
- https://access.redhat.com/security/cve/CVE-2026-41603 advisory
- https://access.redhat.com/security/cve/CVE-2026-41604 advisory
- https://access.redhat.com/security/cve/CVE-2026-41605 advisory
- https://access.redhat.com/security/cve/CVE-2026-41606 advisory
- https://access.redhat.com/security/cve/CVE-2026-41607 advisory
- https://access.redhat.com/security/cve/CVE-2026-41636 advisory
- https://access.redhat.com/security/cve/CVE-2026-42033 advisory
- https://access.redhat.com/security/cve/CVE-2026-42035 advisory
- https://access.redhat.com/security/cve/CVE-2026-42039 advisory
- https://access.redhat.com/security/cve/CVE-2026-42041 advisory
- https://access.redhat.com/security/cve/CVE-2026-42043 advisory
- https://access.redhat.com/security/cve/CVE-2026-42044 advisory
…and 87 more