Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 18

Vulnerabilities 4

• High 7.9
  CVE-2026-78408

  Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

  The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from th…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Sep 2, 2026
• High 7.8
  CVE-2026-76642

  util-linux libmount Privilege Escalation via Failed Mount Helper

  util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owne…

  util-linux util-linux util-linux util-linux Linux Debian Ubuntu Azure Linux Alpine
  Sep 3, 2026
• High 7.8
  CVE-2026-78410

  Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

  A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Sep 2, 2026
• High 7.0
  CVE-2026-78409

  Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks

  The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine
  Sep 2, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-76642
• report
  https://access.redhat.com/security/cve/CVE-2026-78408
• report
  https://access.redhat.com/security/cve/CVE-2026-78409
• report
  https://access.redhat.com/security/cve/CVE-2026-78410
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63162.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2521999
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76642
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76642
• article
  https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2522497
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-78408
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-78408
• article
  https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2522607
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-78409
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-78409
• article
  https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2522684
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-78410
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-78410
• article
  https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m