High8.2Red Hat Linux

High [CVE-2026-53492] Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

This high-severity Red Hat Linux advisory covers CVE-2026-53492.

CVE-2026-53492 Published Jul 1, 2026Updated by vendor Jul 1, 2026

CVE-2026-53492

Affected products & platforms

Red Hat LinuxUnclassified

Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration. Red Hat rates this important (CVSS 8.2).

Weakness: CWE-807. Red Hat lists fixing advisory RHSA-2026:42852 with package multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784061472, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1784060681, rhacm2/submariner-rhel9-operator:1782933193, multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784127491.

Affected versions

< 2.3.2
< 2.2.5
< 2.1.9

Official advisory · high-confidence parse· fetched 1 month ago·verify at source

Fixed versions

multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784061472
multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1784060681
rhacm2/submariner-rhel9-operator:1782933193
multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784127491
syft-main-1.46.0-0.1.hum1
multicluster-globalhub/multicluster-globalhub-rhel9-operator:1784127524
multicluster-globalhub/multicluster-globalhub-manager-rhel9:1784061010
multicluster-globalhub/multicluster-globalhub-manager-rhel9:1784128029
grype-main-0.115.0-0.1.hum1
multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1784562060
trivy-main-0.69.3-1.2.hum1
multicluster-globalhub/multicluster-globalhub-rhel9-operator:1784060515
RHSA-2026:42852

Official advisory · high-confidence parse· fetched 1 month ago·verify at source

Mitigation

Upgrade to a fixed release: multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784061472, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1784060681, rhacm2/submariner-rhel9-operator:1782933193, multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784127491, syft-main-1.46.0-0.1.hum1, multicluster-globalhub/multicluster-globalhub-rhel9-operator:1784127524. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 1 month ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.