VDB
RHSA-2026:47729
RHSA-2026:47729
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:bc0cc5e2154edb7b3281ef647011032079cda79840f54ee62ff24cad015f1863_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:1e3b2f509fc2384c8fa69f5a595e9d233fa798f68c4a93c3e0f33e57ae04c796_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:7255e339c9c1dfe17da791b8d164c487b55e03da3c04b88dbbbfdaf14398474c_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9@sha256:f24634c64ef63e348f75eec8cb2b5fded3900dfc6d0ad596819df4650391d91e_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-dns-proxy-rhel9@sha256:5bf665eee38419570c9274cc8d3cc07f8ccc87352342cab5a1d59008272a4966_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/sriov-network-metrics-exporter-rhel9@sha256:9835b7fdd00176e25dabb8bee2122ca13a1a2d088cadcadbf4d9ed06c2e5379f_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:212c20b0c120beb0d52b2b6c2175be76bfe12a5d68b84f2e707e54a2dd50bacb_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-livenessprobe-rhel9@sha256:8743d97ddcd3df598c753822a3d0920309f95312863193e978fcc4ab3f15b25e_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:5f75207943dcc769b760b69edd7d0ca84cd8cf7369a70cb2eace7d421cf84d19_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:9060a62cf6d768d75c0cbdb006aa6f41eaaf5a49c419eea0b382ef1db472609c_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel9@sha256:f5a5af01be61cefec6b22eb8fd8f68bf944e6a70bc5827d36b279542846969f1_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel9@sha256:3e1ce2eb35206d75c6d7f4537a4f5c0c026e90d46e6cec799d5629403bb3e1d1_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:f1bbe2721ae12df71195ca63451ed045c2d7729e938d74f4b5e538725562e9b9_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/pf-status-relay-rhel9@sha256:02d359f446f99388f92070e3d250cd2b9ba17ebd725ae4b3a6a03dba924f11a3_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:4681a65294fcad3a28a339ecbd751afe217317d04f930ecfaabe154db777f8fc_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:b3602d2e974f2b704d63162f06accbc16d7dd344ac1090790e6a51793e4e9027_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:da97ee8ca11a3a59c4ba0af57a09eb01429f3da643cf398d6a1005c59eddaaf2_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:6a4455f4084396ea15e0bcf946dcbdeb1b62ed8fcda857cfff506174d92f99c5_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-capacity-rhel9@sha256:04d576a7a4639177386580ee2dc787f258eba9a09f570a2006f784aa4e6bb09d_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:cfaeabb508e28b24b903ab60a0354ecbd0ac0191f22a617b9b3143fb59bbfe66_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
…and 183 more
Timeline
- Aug 6, 2026 CVE Published
- Aug 26, 2026 CVE Updated
- Aug 26, 2026 Distribution Patch
- Aug 26, 2026 Distribution Patch
- Aug 26, 2026 Security Advisory
- Aug 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:47729 advisory
- https://access.redhat.com/security/cve/CVE-2026-35469 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47729.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2457729 issue
- https://www.cve.org/CVERecord?id=CVE-2026-35469 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-35469 advisory