Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3505 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 1036 high, 2350 medium, 116 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Low [CVE-2026-98953] fix devlink_rel reference leak when notify work is pending
fix devlink_rel reference leak when notify work is pending. Red Hat rates this low (CVSS 3.3). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Low [CVE-2026-98962] free iov when btrfs_uring_read_extent fails
free iov when btrfs_uring_read_extent() fails. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Low [CVE-2026-98960] don't stash io_uring encoded data across -EAGAIN
don't stash io_uring encoded data across -EAGAIN. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Low [CVE-2026-98929] initialize SecY before registering the netdevice
initialize SecY before registering the netdevice. Red Hat rates this low (CVSS 3). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99046] fix XSK buffer leak on error descriptor
fix XSK buffer leak on error descriptor. Red Hat rates this low (CVSS 3.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Low [CVE-2026-98981] unhash a dentry before detaching the mounts on it
unhash a dentry before detaching the mounts on it. Red Hat rates this low (CVSS 2.5). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98969] reject unterminated algo before autoload
reject unterminated algo before autoload. Red Hat rates this low (CVSS 3.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Low [CVE-2026-99030] don't leave stale bytes in skb_copy_and_csum_bits
don't leave stale bytes in skb_copy_and_csum_bits(). Red Hat rates this low (CVSS 3.7). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Low [CVE-2026-99047] fix XSK buffer leak when rings are stopped
fix XSK buffer leak when rings are stopped. Red Hat rates this low (CVSS 2.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Low [CVE-2026-98984] don't put a mountpoint on a dentry that's being removed
don't put a mountpoint on a dentry that's being removed. Red Hat rates this low (CVSS 3.3). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-98987] look at the topmost mount for a mount namespace file
look at the topmost mount for a mount namespace file. Red Hat rates this low (CVSS 2.3). Weakness: CWE-193. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Low [CVE-2026-99026] free skb when broadcast has no txable port
free skb when broadcast has no txable port. Red Hat rates this low (CVSS 2.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Low [CVE-2026-99029] free the matchall entry on destroy
free the matchall entry on destroy. Red Hat rates this low (CVSS 2.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Low [CVE-2026-98996] don't silently unmount busy mounts
don't silently unmount busy mounts. Red Hat rates this low (CVSS 2.5). Weakness: CWE-826. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99040] Fix add_key race with keyring restriction
Fix add_key() race with keyring restriction. Red Hat rates this low (CVSS 2.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2023-7356] Copy BASE if service data matches EIR_BAA_SERVICE_UUID
Copy BASE if service data matches EIR_BAA_SERVICE_UUID. Red Hat rates this important (CVSS 8.8). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98869] Infer zext_dst based on static register liveness analysis
Infer zext_dst based on static register liveness analysis. Red Hat rates this important (CVSS 6.7). Weakness: CWE-681. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
High [CVE-2026-98733] Denial of Service via use-after-free in Bluetooth ISO packet queueing
Denial of Service via use-after-free in Bluetooth ISO packet queueing. Red Hat rates this moderate (CVSS 7). Weakness: CWE-416. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
High [CVE-2026-98466] Transfer the hyp stack pages out of the host stage-2
Transfer the hyp stack pages out of the host stage-2. Red Hat rates this important (CVSS 8.2). Weakness: CWE-653. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-98442] fix helper UAF due to extensions realloc
fix helper UAF due to extensions realloc. Red Hat rates this important (CVSS 7.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.