Low3.7Red Hat & Ubuntu Linux
Improved Arena allocations (Oracle CPU 2026-04)
CVE-2026-22008 Published Apr 21, 2026
CVE-2026-22008
Affected products & platforms
Red Hat & Ubuntu LinuxUnclassified
Summary
Improved Arena allocations (Oracle CPU 2026-04). Red Hat rates this low (CVSS 3.7). Weakness: CWE-122. Affected package(s): java. Resolved in Red Hat advisory RHSA-2026:9694 — update the affected packages (`sudo dnf update`).
Affected versions
- java-25-openjdk-main-25.0.2.0.10-5.1.hum1
- java-25-openjdk-portable
- java-25-openjdk-1:25.0.3.0.9-1.el10_2
- java-25-openjdk-windows
- java-25-openjdk-1:25.0.3.0.9-1.el9
- java-25-openjdk-portable-main-25.0.2.0.10-2.1.hum1
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Fixed versions
- RHSA-2026:9694
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Update the affected package(s) to the fixed version shipped in RHSA-2026:9694 (`sudo dnf update` / `yum update`).
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.