VDB
RHSA-2026:68349
RHSA-2026:68349
PUBLISHED
CVSS 8.100000381469727 HIGH
A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2 | * |
…and 14 more
Timeline
- Sep 16, 2026 CVE Published
- Sep 23, 2026 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:68349 advisory
- https://access.redhat.com/security/cve/CVE-2026-15792 advisory
- https://access.redhat.com/security/cve/CVE-2026-18140 advisory
- https://access.redhat.com/security/cve/CVE-2026-29181 advisory
- https://access.redhat.com/security/cve/CVE-2026-32283 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-35469 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68349.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2503746 issue
- https://www.cve.org/CVERecord?id=CVE-2026-15792 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-15792 advisory
…and 76 more