CVE-2026-40447

medium Red Hat
CVSS v3 Base Score
5.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.0%
Exploitation probability in 30 days
Top 98% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
None
Confidentiality
None
Integrity
None
Availability
High
Published: April 13, 2026 (31 days ago)
Last Modified: April 13, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in Escargot. This integer overflow or wraparound vulnerability can lead to undefined behavior, potentially allowing a local attacker to cause a Denial of Service (DoS) by making the system unstable or crash.

CWE

CWE-190

Affected Products

Logging Subsystem for Red Hat OpenShiftRed Hat Enterprise Linux 10Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat OpenShift Container Platform 4Red Hat OpenShift Update Service

References

🔗 bugzilla.redhat.com 🔗 www.cve.org 🔗 nvd.nist.gov 🔗 github.com