RHSA-2026:53734HighCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization v4.21 Images

Published
August 11, 2026
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-40898 →

📋 Description

CVE-2026-40898 — github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers

🎯 Affected products4

  • Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:3d5e780f39f8c43db9a3a874abe982f658597018e534692199d1d3efa1fa9949_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:87a974f9fb639ab3a3c20dc40e1ee88dc4f6cd5ee3f55b4397a99e2c1defd5ca_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:f0f9c298f70edf207f4efa03b5fb51c34886d68deb2dda4ab7dc2ad3e5e0fefe_amd64 as a component of Red Hat Container Native Virtualization 4.21

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)