What is RHSA-2026:94472?

RHSA-2026:94472 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (ROCm 7.1)

Which CVE IDs does RHSA-2026:94472 cover?

RHSA-2026:94472 covers the following CVE IDs: CVE-2026-96889, CVE-2026-111497. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:94472?

RHSA-2026:94472 has a CVSS v3 base score of 8.1, published by Red Hat Product Security.

Which products are affected by RHSA-2026:94472?

RHSA-2026:94472 affects 2 products, including: Red Hat OpenShift AI 3.4; registry.redhat.io/rhai/base-image-rocm-7.1-rhel9@sha256:3f53a810384072dac863012c9146f8389a1d173b549c62fa6ca49f246f51f1c3_amd64 as a component of Red Hat OpenShift AI 3.4.

RHSA-2026:94472HighCVSS 8.1

Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (ROCm 7.1)

Vendor

Red Hat Product Security

Published

November 3, 2026

Last Modified

November 9, 2026

🔗 CVE IDs covered (2)

CVE-2026-96889 →CVE-2026-111497 →

📋 Description

CVE-2026-96889 — librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-111497 — brotli: Out-of-Bounds Write in Google Brotli Decoder

🎯 Affected products2

Red Hat OpenShift AI 3.4
registry.redhat.io/rhai/base-image-rocm-7.1-rhel9@sha256:3f53a810384072dac863012c9146f8389a1d173b549c62fa6ca49f246f51f1c3_amd64 as a component of Red Hat OpenShift AI 3.4

✅ Remediation

For more information visit https://access.redhat.com/errata/RHSA-2026:94472 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products2

✅ Remediation

🔗 References (6)