RHSA-2026:88424: Critical severity Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support vulnerability
Published Oct 22, 2026
·Updated
Critical: .NET 9.0 security update
Affected Software
12 affected components
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for Power, little endian - 4 years of support
Red Hat Red Hat Enterprise Linux for x86_64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Event History
Oct 22, 2026
Advisory Published
via Red Hat·09:45 PM
Data Sourced
via Red Hat·09:45 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which systems are in scope for this update?
The advisory applies to the listed Red Hat Enterprise Linux and CodeReady Linux Builder repositories for x86_64, ARM 64, Power little endian, and IBM z Systems. It includes specified 4-year support, 4-year updates, and Extended Update Support channels.
2
What should teams prioritize when triaging this advisory?
Treat systems consuming the affected .NET 9.0 packages from the listed repositories as a critical-priority update target. The advisory assigns critical severity (9) and a risk value of 42.
3
Does the advisory data indicate whether a default configuration is affected or provide temporary mitigations?
No. The provided data does not state configuration prerequisites, exploit requirements, default exposure, detection steps, or mitigations for systems that cannot yet be patched.