VDB
RHSA-2026:66521
RHSA-2026:66521
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2afdc9734eae1ef40de4550f3fbaf76b504333804f5eb75be037849a9dafca84_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f8926ba9afde4be23599a36a60c05e56c1c6395d522f0ac355829bb93f77032c_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:8bc39fa9afcc10e68d9f25ae14fe1501c6a128cda327e69c5e79fab9a82cf3a0_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:a5f799eee112dc30e77c0ba5a7c5baf6859e778e9e48f98c6b860e6411faa07e_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:01202b83e79f9cc08b3befa27f932a08f2021d634bcc60afb8275a3cf049d153_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b7ce1ff86db289869a70e85f04afdea0ebc5a6d0355a4a1852574cb2d168e761_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:04bcd8f7bc94a504e7b0f60d4f68a047c1ede64c5cb45a78971bdb0b33ceb53d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ddbf530f7ec5f0676cd92c023e1f5105dca537d67b49a401267a6a7b50ff3bcb_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9274be691efca76b4362b6e482c1abfa08292d2718b6bfca788dba47412a45f2_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:661253d8317a91ad3077ab8572943dc8b37dd1e62ca7795ba0b1869a2eebf5a0_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:718f7a43dfd4ba546ca0a09c61bd7cf90acf200a1c889c75285f1b148974cb52_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8cdb179af25749ac44844e045d2b64826398fa6b4ca2dab94c6aad30d630cc98_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:b58b891746d75192399b280c90de12d079dda27049d140b63d5f01006009fd69_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:72ae49d6a4343093cc2ef0fc98ee2a9e27cb747c17e33ff9e2a69b17d4449378_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4df1e7b6b03bafee47e9474b3332fb50613e0a843da82a6b2c5810b127ea0ca4_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6ec0bb95f6f87615ba3dab2e6232c44f3dae7ecdc291e50bb605580a221d95ac_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:d876ee19a334fed366a748147db314196ad40d314300f802d2cb616bb7011a93_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e416e672866ab745895f9ab3a473b27df9c9099f6b9827cad459300e6dd3e47e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fc97d3d4bee4ed82a6824ae07e2488f2f58e441cd0ad400a2ba3feb781838f6c_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:540f6b00efbcc520196e807fbbc5c1b982fd080873e911147a60b0c9e3c0e4d1_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6 | *, *, * |
…and 15 more
Timeline
- Sep 10, 2026 CVE Published
- Sep 23, 2026 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:66521 advisory
- https://access.redhat.com/security/cve/CVE-2026-15792 advisory
- https://access.redhat.com/security/cve/CVE-2026-17106 advisory
- https://access.redhat.com/security/cve/CVE-2026-18140 advisory
- https://access.redhat.com/security/cve/CVE-2026-29181 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-35469 advisory
- https://access.redhat.com/security/cve/CVE-2026-39828 advisory
- https://access.redhat.com/security/cve/CVE-2026-39830 advisory
- https://access.redhat.com/security/cve/CVE-2026-39831 advisory
- https://access.redhat.com/security/cve/CVE-2026-39832 advisory
- https://access.redhat.com/security/cve/CVE-2026-39835 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42508 advisory
- https://access.redhat.com/security/cve/CVE-2026-46595 advisory
- https://access.redhat.com/security/cve/CVE-2026-46597 advisory
- https://access.redhat.com/security/cve/CVE-2026-46604 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
…and 142 more