VDB
RHSA-2026:67539
RHSA-2026:67539
PUBLISHED
CVSS 7.699999809265137 HIGH
A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.
Risk Scores
CVSS 3.1
7.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:c6dfefef016fbc204d8f3174f86734686398a37ff04787de2dbe00b8a22e1802_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:b68a20444b2a54f5ed3d6e776877a968b81ff633e9077cab9666dd8a0e1dd618_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/thanos-rhel9@sha256:6dc6573a6e9ddd91a9f21c588c0d4093a4154a9392ac582c79d332013f042f2f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:6aaf5886fabd1509a385045556b7fec602f253e829814897214fb7265bea16c4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f26535d4b3a8ec733c3f0161ee904f48966601d13ae150302d63a387f483501_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:4b459e634d6dedcbeb8c36268af492189e991c87d1390f100474433156a28c8e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7bcb9ad5965d47839f0ff10fdc9aeac4d89c8596cbb1c372310e499454211a8c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/console-rhel9@sha256:709d638eea0f9007f10d2d12f830ec8f9e088c11b3cc1ccfa44e5f6d473c3171_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:e8069763f3ff74d01df98a34ba2f841a4a46d428bfa9654cea02ab58715e0f5f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:adead423a686ab893a8685025b043f4ddb98a4bbf8a536ab51db7b7e02cfe4b3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:23294b8612c80021fb3349d5ef3ec50a18931db20e1b12dd9b550009441323c1_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:f257616f7be5a9d4150e1a3375338ebbe30ae1645bf7e162162373dbd202ad5c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ef0202eae932b7389275befe83e235e97487f8ae0429a341a902aa40d19104c1_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:8dcf44d52d43f2cbfadb2b3fbe87651acebeb33828dbcf432aef8b2931897e62_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:73d46488a9e2e21741195a788caafaf8f3928549065ac82880b277fdabf33ed4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:783ab0f72cdeaa320cd5b1e81cce9ca076f4e6a560edd8f1b71e9729caea6df5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/search-collector-rhel9@sha256:976aff75b520f0f5ff9b67ca1bf25c3f7f92d43e9f2334ab6d6ba53188e67d2c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:26d5f3f5aff8f2359d5056780ae439978dccdf2eba253176c24f149db35ca561_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:69934e508ff9d747a94248004528aa3ebb3971b8eaca67e2f79804ef2a9b6fe5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
| Red Hat | registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:a344b8eb13774bf277ca4c49f45c15b6c37e7f88e9cd009a39aca96ec2f392d4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14 | * |
…and 156 more
Timeline
- Sep 15, 2026 CVE Published
- Sep 23, 2026 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:67539 advisory
- https://access.redhat.com/security/cve/CVE-2025-47907 advisory
- https://access.redhat.com/security/cve/CVE-2026-33377 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-48586 advisory
- https://access.redhat.com/security/cve/CVE-2026-55969 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-59879 advisory
- https://access.redhat.com/security/cve/CVE-2026-66780 advisory
- https://access.redhat.com/security/cve/CVE-2026-71556 advisory
- https://access.redhat.com/security/cve/CVE-2026-89060 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67539.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2387083 issue
- https://www.cve.org/CVERecord?id=CVE-2025-47907 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-47907 advisory
- https://go.dev/cl/693735 advisory
- https://go.dev/issue/74831 advisory
…and 59 more