CVE-2026-15809
Fixed in a distro release EPSS <1%CVSS 7.8
A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
Products: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20, Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift Container Platform 4.22, Red Hat Confidential Compute Attestation, Red Hat OpenShift Container Platform 4
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 4.12 | cri-o | 0:1.25.5-36.rhaos4.12.git2e7f657.el8 |
| Red Hat openshift 4.12 | cri-o-debuginfo | 0:1.25.5-36.rhaos4.12.git2e7f657.el8 |
| Red Hat openshift 4.12 | cri-o-debugsource | 0:1.25.5-36.rhaos4.12.git2e7f657.el8 |
| Red Hat openshift 4.13 | containernetworking-plugins | 1:1.4.0-8.rhaos4.13.el8 |
| Red Hat openshift 4.13 | containernetworking-plugins-debuginfo | 1:1.4.0-8.rhaos4.13.el8 |
| Red Hat openshift 4.13 | containernetworking-plugins-debugsource | 1:1.4.0-8.rhaos4.13.el8 |
| Red Hat openshift 4.13 | cri-o | 0:1.26.5-32.rhaos4.13.git1088e36.el8 |
| Red Hat openshift 4.13 | cri-o | 0:1.26.5-32.rhaos4.13.git1088e36.el9 |
| Red Hat openshift 4.13 | cri-o-debuginfo | 0:1.26.5-32.rhaos4.13.git1088e36.el8 |
| Red Hat openshift 4.13 | cri-o-debuginfo | 0:1.26.5-32.rhaos4.13.git1088e36.el9 |
| Red Hat openshift 4.13 | cri-o-debugsource | 0:1.26.5-32.rhaos4.13.git1088e36.el9 |
| Red Hat openshift 4.13 | cri-o-debugsource | 0:1.26.5-32.rhaos4.13.git1088e36.el8 |
| Red Hat openshift 4.13 | cri-tools | 0:1.26.0-9.el8 |
| Red Hat openshift 4.13 | cri-tools | 0:1.26.0-9.el9 |
| Red Hat openshift 4.13 | cri-tools-debuginfo | 0:1.26.0-9.el8 |
| Red Hat openshift 4.13 | cri-tools-debuginfo | 0:1.26.0-9.el9 |
| Red Hat openshift 4.13 | cri-tools-debugsource | 0:1.26.0-9.el9 |
| Red Hat openshift 4.13 | cri-tools-debugsource | 0:1.26.0-9.el8 |
| Red Hat openshift 4.13 | openshift | 0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift | 0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8 |
| Red Hat openshift 4.13 | openshift-clients | 0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el8 |
| Red Hat openshift 4.13 | openshift-clients | 0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift-clients-redistributable | 0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el8 |
| Red Hat openshift 4.13 | openshift-clients-redistributable | 0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift-hyperkube | 0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift-hyperkube | 0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8 |
| Red Hat openshift 4.13 | skopeo | 2:1.11.3-7.rhaos4.13.el8 |
| Red Hat openshift 4.13 | skopeo | 2:1.11.3-7.rhaos4.13.el9 |
| Red Hat openshift 4.13 | skopeo-debuginfo | 2:1.11.3-7.rhaos4.13.el9 |
| Red Hat openshift 4.13 | skopeo-debugsource | 2:1.11.3-7.rhaos4.13.el9 |
| Red Hat openshift 4.13 | skopeo-tests | 2:1.11.3-7.rhaos4.13.el8 |
| Red Hat openshift 4.13 | skopeo-tests | 2:1.11.3-7.rhaos4.13.el9 |
| Red Hat openshift 4.14 | cri-o | 0:1.27.8-22.rhaos4.14.git0633bf1.el8 |
| Red Hat openshift 4.14 | cri-o | 0:1.27.8-22.rhaos4.14.git0633bf1.el9 |
| Red Hat openshift 4.14 | cri-o-debuginfo | 0:1.27.8-22.rhaos4.14.git0633bf1.el8 |
| Red Hat openshift 4.14 | cri-o-debuginfo | 0:1.27.8-22.rhaos4.14.git0633bf1.el9 |
| Red Hat openshift 4.14 | cri-o-debugsource | 0:1.27.8-22.rhaos4.14.git0633bf1.el9 |
| Red Hat openshift 4.14 | cri-o-debugsource | 0:1.27.8-22.rhaos4.14.git0633bf1.el8 |
| Red Hat openshift 4.15 | cri-o | 0:1.28.11-17.rhaos4.15.git48e6ddb.el9 |
| Red Hat openshift 4.15 | cri-o | 0:1.28.11-17.rhaos4.15.git48e6ddb.el8 |
| Red Hat openshift 4.15 | cri-o-debuginfo | 0:1.28.11-17.rhaos4.15.git48e6ddb.el9 |
| Red Hat openshift 4.15 | cri-o-debuginfo | 0:1.28.11-17.rhaos4.15.git48e6ddb.el8 |
| Red Hat openshift 4.15 | cri-o-debugsource | 0:1.28.11-17.rhaos4.15.git48e6ddb.el9 |
| Red Hat openshift 4.15 | cri-o-debugsource | 0:1.28.11-17.rhaos4.15.git48e6ddb.el8 |
| Red Hat openshift 4.16 | cri-o | 0:1.29.13-14.rhaos4.16.git84cfdc6.el8 |
| Red Hat openshift 4.16 | cri-o | 0:1.29.13-14.rhaos4.16.git84cfdc6.el9 |
| Red Hat openshift 4.16 | cri-o-debuginfo | 0:1.29.13-14.rhaos4.16.git84cfdc6.el9 |
| Red Hat openshift 4.16 | cri-o-debuginfo | 0:1.29.13-14.rhaos4.16.git84cfdc6.el8 |
| Red Hat openshift 4.16 | cri-o-debugsource | 0:1.29.13-14.rhaos4.16.git84cfdc6.el8 |
| Red Hat openshift 4.16 | cri-o-debugsource | 0:1.29.13-14.rhaos4.16.git84cfdc6.el9 |
| Red Hat openshift 4.17 | cri-o | 0:1.30.14-13.rhaos4.17.git3a25d98.el8 |
| Red Hat openshift 4.17 | cri-o | 0:1.30.14-13.rhaos4.17.git3a25d98.el9 |
| Red Hat openshift 4.17 | cri-o-debuginfo | 0:1.30.14-13.rhaos4.17.git3a25d98.el8 |
| Red Hat openshift 4.17 | cri-o-debuginfo | 0:1.30.14-13.rhaos4.17.git3a25d98.el9 |
| Red Hat openshift 4.17 | cri-o-debugsource | 0:1.30.14-13.rhaos4.17.git3a25d98.el8 |
| Red Hat openshift 4.17 | cri-o-debugsource | 0:1.30.14-13.rhaos4.17.git3a25d98.el9 |
| Red Hat openshift 4.17 | cri-tools | 0:1.30.0-10.el8 |
| Red Hat openshift 4.17 | cri-tools | 0:1.30.0-10.el9 |
| Red Hat openshift 4.17 | cri-tools-debuginfo | 0:1.30.0-10.el9 |
| Red Hat openshift 4.17 | cri-tools-debuginfo | 0:1.30.0-10.el8 |
| Red Hat openshift 4.17 | cri-tools-debugsource | 0:1.30.0-10.el8 |
| Red Hat openshift 4.17 | cri-tools-debugsource | 0:1.30.0-10.el9 |
| Red Hat openshift 4.17 | openshift | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8 |
| Red Hat openshift 4.17 | openshift | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-clients | 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el8 |
| Red Hat openshift 4.17 | openshift-clients | 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-clients-redistributable | 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-clients-redistributable | 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el8 |
| Red Hat openshift 4.17 | openshift-hyperkube | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8 |
| Red Hat openshift 4.17 | openshift-hyperkube | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-kube-apiserver | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8 |
| Red Hat openshift 4.17 | openshift-kube-apiserver | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-kube-controller-manager | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8 |
| Red Hat openshift 4.17 | openshift-kube-controller-manager | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-kube-scheduler | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8 |
| Red Hat openshift 4.17 | openshift-kube-scheduler | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-kubelet | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9 |
| Red Hat openshift 4.17 | openshift-kubelet | 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8 |
| Red Hat openshift 4.17 | ose-aws-ecr-image-credential-provider | 0:4.17.0-202609190230.p2.gb0a5486.assembly.stream.el9 |
| Red Hat openshift 4.17 | ose-aws-ecr-image-credential-provider | 0:4.17.0-202609190230.p2.gb0a5486.assembly.stream.el8 |
| Red Hat openshift 4.17 | ose-azure-acr-image-credential-provider | 0:4.17.0-202609081428.p2.g5bcfbfd.assembly.stream.el9 |
| Red Hat openshift 4.17 | ose-azure-acr-image-credential-provider | 0:4.17.0-202609081428.p2.g5bcfbfd.assembly.stream.el8 |
| Red Hat openshift 4.17 | ose-gcp-gcr-image-credential-provider | 0:4.17.0-202609081428.p2.g8ce997d.assembly.stream.el9 |
| Red Hat openshift 4.17 | ose-gcp-gcr-image-credential-provider | 0:4.17.0-202609081428.p2.g8ce997d.assembly.stream.el8 |
| Red Hat openshift 4.18 | cri-o | 0:1.31.13-14.rhaos4.18.gitf2de9ac.el9 |
| Red Hat openshift 4.18 | cri-o | 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8 |
| Red Hat openshift 4.18 | cri-o-debuginfo | 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8 |
| Red Hat openshift 4.18 | cri-o-debuginfo | 0:1.31.13-14.rhaos4.18.gitf2de9ac.el9 |
| Red Hat openshift 4.18 | cri-o-debugsource | 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8 |
| Red Hat openshift 4.18 | cri-o-debugsource | 0:1.31.13-14.rhaos4.18.gitf2de9ac.el9 |
| Red Hat openshift 4.19 | cri-o | 0:1.32.13-11.rhaos4.19.git089e95c.el9 |
| Red Hat openshift 4.19 | cri-o-debuginfo | 0:1.32.13-11.rhaos4.19.git089e95c.el9 |
| Red Hat openshift 4.19 | cri-o-debugsource | 0:1.32.13-11.rhaos4.19.git089e95c.el9 |
| Red Hat openshift 4.20 | cri-o | 0:1.33.13-5.rhaos4.20.git7ebc848.el9 |
| Red Hat openshift 4.20 | cri-o-debuginfo | 0:1.33.13-5.rhaos4.20.git7ebc848.el9 |
| Red Hat openshift 4.20 | cri-o-debugsource | 0:1.33.13-5.rhaos4.20.git7ebc848.el9 |
| Red Hat openshift 4.21 | cri-o | 0:1.34.11-4.rhaos4.21.git358c4b4.el9 |
| Red Hat openshift 4.21 | cri-o-debuginfo | 0:1.34.11-4.rhaos4.21.git358c4b4.el9 |
| Red Hat openshift 4.21 | cri-o-debugsource | 0:1.34.11-4.rhaos4.21.git358c4b4.el9 |
| Red Hat openshift 4.22 | cri-o | 0:1.35.6-5.rhaos4.22.git41f610b.el9 |
| Red Hat openshift 4.22 | cri-o-debuginfo | 0:1.35.6-5.rhaos4.22.git41f610b.el9 |
| Red Hat openshift 4.22 | cri-o-debugsource | 0:1.35.6-5.rhaos4.22.git41f610b.el9 |
| Red Hat openshift 4.22 | cri-tools | 0:1.35.0-3.el9 |
| Red Hat openshift 4.22 | cri-tools-debuginfo | 0:1.35.0-3.el9 |
| Red Hat openshift 4.22 | cri-tools-debugsource | 0:1.35.0-3.el9 |
| Red Hat openshift 4.22 | openshift | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el9 |
| Red Hat openshift 4.22 | openshift | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el8 |
| Red Hat openshift 4.22 | openshift-clients | 0:4.22.0-202608131626.p2.g7ec2e14.assembly.stream.el9 |
| Red Hat openshift 4.22 | openshift-clients | 0:4.22.0-202608131626.p2.g7ec2e14.assembly.stream.el8 |
| Red Hat openshift 4.22 | openshift-clients-redistributable | 0:4.22.0-202608131626.p2.g7ec2e14.assembly.stream.el9 |
| Red Hat openshift 4.22 | openshift-clients-redistributable | 0:4.22.0-202608131626.p2.g7ec2e14.assembly.stream.el8 |
| Red Hat openshift 4.22 | openshift-hyperkube | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el8 |
| Red Hat openshift 4.22 | openshift-hyperkube | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el9 |
| Red Hat openshift 4.22 | openshift-kube-apiserver | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el9 |
| Red Hat openshift 4.22 | openshift-kube-controller-manager | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el9 |
| Red Hat openshift 4.22 | openshift-kube-scheduler | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el9 |
| Red Hat openshift 4.22 | openshift-kubelet | 0:4.22.0-202608190726.p2.g05744ab.assembly.stream.el9 |
| Red Hat openshift 4.22 | ose-aws-ecr-image-credential-provider | 0:4.22.0-202608131626.p2.gb4bad3f.assembly.stream.el8 |
| Red Hat openshift 4.22 | ose-aws-ecr-image-credential-provider | 0:4.22.0-202608131626.p2.gb4bad3f.assembly.stream.el9 |
| Red Hat openshift 4.22 | ose-azure-acr-image-credential-provider | 0:4.22.0-202608131626.p2.ga17a3e3.assembly.stream.el8 |
| Red Hat openshift 4.22 | ose-azure-acr-image-credential-provider | 0:4.22.0-202608131626.p2.ga17a3e3.assembly.stream.el9 |
| Red Hat openshift 4.22 | ose-gcp-gcr-image-credential-provider | 0:4.22.0-202608131626.p2.gea31ab8.assembly.stream.el8 |
| Red Hat openshift 4.22 | ose-gcp-gcr-image-credential-provider | 0:4.22.0-202608131626.p2.gea31ab8.assembly.stream.el9 |