Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3505 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 1038 high, 2348 medium, 116 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Medium [CVE-2026-99045] h_free logical LAN on open-fail after register
h_free logical LAN on open-fail after register. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-459. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99000] Fix shrinker accounting double-subtraction on nested external pins
Fix shrinker accounting double-subtraction on nested external pins. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-191. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Low [CVE-2026-98948] Denial of Service via port range register leak in flower template creation
Denial of Service via port range register leak in flower template creation. Red Hat rates this low (CVSS 2.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Low [CVE-2026-98947] Denial of Service via memory leak in vsock VMCI datagram handling
Denial of Service via memory leak in vsock VMCI datagram handling. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98937] information disclosure via unprivileged perf kernel callchain capture
information disclosure via unprivileged perf kernel callchain capture. Red Hat rates this low (CVSS 3.3). Weakness: CWE-497. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98935] Information disclosure via uninitialized stack memory in RTC driver
Information disclosure via uninitialized stack memory in RTC driver. Red Hat rates this low (CVSS 3.3). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98874] don't WARN on WoWLAN suspend w/o netdetect
don't WARN on WoWLAN suspend w/o netdetect. Red Hat rates this low (CVSS 2.3). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Low [CVE-2026-98873] zero at allocation time
zero at allocation time. Red Hat rates this low (CVSS 3.3). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98885] return error early if file xattr cannot be changed
return error early if file xattr cannot be changed. Red Hat rates this low (CVSS 3.3). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99080] Free any excess xarray nodes in clear_inode
Free any excess xarray nodes in clear_inode(). Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99068] Fix memory leakage when clearing DAO input mappers
Fix memory leakage when clearing DAO input mappers. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Low [CVE-2026-99070] do not warn on route notification size race
do not warn on route notification size race. Red Hat rates this low (CVSS 2.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Low [CVE-2026-98910] Unwind debug trap enable on copy_to_user failure
Unwind debug trap enable on copy_to_user failure. Red Hat rates this low (CVSS 3.3). Weakness: CWE-459. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Low [CVE-2026-99059] reject response consumption after intermediate initiation
reject response consumption after intermediate initiation. Red Hat rates this low (CVSS 3.7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99057] don't leak the skb when xennet_fill_frags fails
don't leak the skb when xennet_fill_frags() fails. Red Hat rates this low (CVSS 2.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Low [CVE-2026-99067] fix local_root reference leak in scrub_print_warning_inode
fix local_root reference leak in scrub_print_warning_inode(). Red Hat rates this low (CVSS 1.9). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: kernel-rt.
Low [CVE-2026-99063] dm ioctl: don't let data_start run past the buffer
dm ioctl: don't let data_start run past the buffer. Red Hat rates this low (CVSS 2.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98913] fix PTP device ref leak in nicvf_probe
fix PTP device ref leak in nicvf_probe(). Red Hat rates this low (CVSS 2.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Low [CVE-2026-98950] avoid u16 truncation of hlen in bpf_flow_dissect
avoid u16 truncation of hlen in bpf_flow_dissect(). Red Hat rates this low (CVSS 3.7). Weakness: CWE-681. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98966] fix the program leak when XDP is replaced
fix the program leak when XDP is replaced. Red Hat rates this low (CVSS 2.3). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.