Red Hat Operator Flaw Exposes Credentials; Multiple Vulnerabilities Disclosed

A critical flaw in Red Hat's runtimes-inventory-rhel8-operator could allow cluster administrative credentials to be exposed. The vulnerability stems from an internal proxy component that incorrectly attaches these credentials to commands it receives, rather than restricting them to authorized operations. This misconfiguration presents a significant risk for environments utilizing this operator, potentially leading to unauthorized access and control over cluster resources. The exact impact and exploitability depend on the specific deployment and usage patterns within Red Hat environments. CVE-2025-11393

The libssh library, in versions prior to 0.11.2, contains a vulnerability that could lead to an out-of-bounds read. This occurs within the sftp_handle function due to an incorrect comparison check, allowing an attacker to access memory beyond the valid handle. Such memory access can lead to information disclosure or potentially denial-of-service conditions. Users of libssh should update to version 0.11.2 or later to mitigate this risk. CVE-2025-5318

A privilege escalation vulnerability has been identified in linux-pam, specifically within the pam_namespace module. Local users can exploit this flaw by leveraging user-controlled paths without adequate protection, utilizing symlink attacks and race conditions. This allows an attacker to elevate their privileges to root, gaining complete control over the affected system. Patches and updated versions of linux-pam should be applied to address this security concern. CVE-2025-6020

Libarchive versions are affected by a vulnerability involving an integer overflow in the archive_read_format_rar_seek_data() function, which can ultimately lead to a double-free condition. This complex vulnerability could be exploited to achieve arbitrary code execution or denial-of-service. The flaw was detailed in CISA ICS Advisories concerning Siemens products, highlighting its potential impact in industrial control systems. Users should update to patched versions of libarchive. CVE-2025-5914

Red Hat's libxslt library is susceptible to a memory corruption flaw due to improper modification of attribute types, such as 'atype' and 'flags'. This corruption can interfere with internal memory management, particularly impacting XSLT functions like key() when processing tree fragments. The issue can lead to crashes or unpredictable behavior, potentially affecting the integrity and availability of applications relying on libxslt for XML transformations. CVE-2025-7425

An insecure method in early versions of Operator-SDK, specifically the user_setup script, allowed operator containers to run with elevated privileges in environments using random UIDs. This script modified permissions for /etc/passwd, potentially enabling privilege escalation. Operator-SDK versions before 0.15.2 are affected. Users should upgrade to a patched version to prevent potential security compromises. CVE-2025-7195

A flaw in rsync could allow an attacker to leak uninitialized memory when file checksums are compared. The vulnerability arises from the ability to manipulate the checksum length (s2length), leading to a comparison between a checksum and uninitialized memory. This could expose sensitive information from the system's memory. Users should ensure they are using updated versions of rsync that address this checksum comparison issue. CVE-2024-12085

The serialize-javascript module in npm has a vulnerability where it fails to properly sanitize certain inputs, such as regex or other JavaScript object types. This allows attackers to inject malicious code, potentially leading to cross-site scripting (XSS) attacks or other forms of code execution within applications that use this module. Updating to a version that properly sanitizes these inputs is crucial. CVE-2024-11831

GNU Coreutils' sort utility contains a heap buffer under-read vulnerability in its begfield() function. When a crafted command using the traditional key format is executed, the program may access memory outside the allocated buffer. This could lead to application crashes or potentially information disclosure. Users should update to a version of Coreutils that includes a fix for this buffer under-read issue. CVE-2025-5278

A low-severity integer overflow vulnerability exists in curl version 7.65.2 within tool_operate.c. This can be triggered by providing a large value for the retry delay. While many parties report no direct security impact, it could theoretically lead to a denial-of-service condition. Users are advised to update curl to a version that addresses this integer overflow. CVE-2020-19909

Several Linux kernel vulnerabilities have been resolved, including issues related to IGMP multicast group handling during device destruction (CVE-2026-64423), security checks for ksmbd (CVE-2026-64394), parport unregistration on probe failure in uss720 (CVE-2026-64338), GenDisk cleanup paths in Rust (CVE-2026-64509), nullable dynamic inner array lookups in BPF (CVE-2026-64353), PFN access limits in page_ext (CVE-2026-64295), reference counting leaks in regulator: scmi (CVE-2026-64301), upper bounds for iommufd veventq depth (CVE-2026-64291), memory leaks on ULPI registration failure (CVE-2026-64332), and clearing intr_entry in fuse operations (CVE-2026-64265). These fixes enhance the stability and security of the Linux kernel.