AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-75894

Red Hat osmo-iuh: denial of service

Red Hat

CVE-2026-75894 · Published Sep 18, 2026 · updated Sep 21, 2026

High7.5
Fix: upgrade to 1.8.0 or later
Red Hat advisory

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

Affected versions

PackageAffectedFixed in
osmo-iuh
Product
>= 0.1.0, < 1.8.01.8.0
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-617

More Red Hat advisories

All Red Hat
Critical 9.3Sep 18Red Hat OpenShift console: server-side request forgeryCVE-2026-75885no fix yetMedium 6.5Sep 18Red Hat Netty: request smugglingCVE-2026-93574no fix yetMedium 6.5Sep 18Red Hat Netty: request smugglingCVE-2026-93562no fix yetMedium 6.1Sep 18A flaw was found in cockpit-filesCVE-2026-91202no fix yetMedium 6.0Sep 18Red Hat Enterprise Linux 9: race conditionCVE-2026-91203no fix yetMedium 6.0Sep 18Red Hat cockpit-files: race conditionCVE-2026-91205no fix yet