Red Hat Enterprise Linux (cockpit): Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2026-76235

  Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html

  A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of servi…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Aug 19, 2026
• Medium 5.9
  CVE-2026-91147

  Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

  A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the `WebService.UrlRoot` is configured and a request is made to the exact URL-root p…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 18, 2026

Revision history

1. 2026-11-11 #4

   Neue Updates von Red Hat aufgenommen

2. 2026-11-09 #3

   Neue Updates von Red Hat aufgenommen

3. 2026-11-03 #2

   Neue Updates von Oracle Linux, Rocky Enterprise Software Foundation und Red Hat aufgenommen

4. 2026-11-02 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:94485 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:94485
• Oracle Linux Security Advisory ELSA-2026-94485 vom 2026-11-03
  https://linux.oracle.com/errata/ELSA-2026-94485.html
• Rocky Linux Security Advisory RLSA-2026:94485 vom 2026-11-04
  https://errata.build.resf.org/RLSA-2026:94485
• Rocky Linux Security Advisory RLSA-2026:94533 vom 2026-11-04
  https://errata.build.resf.org/RLSA-2026:94533
• Oracle Linux Security Advisory ELSA-2026-94533 vom 2026-11-03
  https://linux.oracle.com/errata/ELSA-2026-94533.html
• Red Hat Security Advisory RHSA-2026:94533 vom 2026-11-04
  https://access.redhat.com/errata/RHSA-2026:94533
• Red Hat Security Advisory RHSA-2026:96250 vom 2026-11-09
  https://access.redhat.com/errata/RHSA-2026:96250
• Rocky Linux Security Advisory RLSA-2026:96250 vom 2026-11-10
  https://errata.build.resf.org/RLSA-2026:96250
• Red Hat Security Advisory RHSA-2026:98567 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98567
• Red Hat Security Advisory RHSA-2026:98463 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98463