Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3505 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 1035 high, 2351 medium, 116 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Medium [CVE-2026-98662] Denial of Service via use-after-free during gp2ap020a00f device removal
Denial of Service via use-after-free during gp2ap020a00f device removal. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-416. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98650] Fix potential races in dat skey functions
Fix potential races in dat skey functions. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-362. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98642] Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk
Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-416. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98639] Fix NACL hfence entry update order
Fix NACL hfence entry update order. Red Hat rates this important (CVSS 5.8). Weakness: CWE-362. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98453] close handle after create-context parsing failure
close handle after create-context parsing failure. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98452] clean up failed cached directory opens
clean up failed cached directory opens. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-771. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98460] reject out-of-range OCF values
reject out-of-range OCF values. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-1289. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98515] fix double-free in nvif_vmm_dtor
fix double-free in nvif_vmm_dtor. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-1341. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98506] do not dissolve gigantic pages without runtime support
do not dissolve gigantic pages without runtime support. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-826. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98507] fix missing barrier between anon_vma init and vma->anon_vma publish
fix missing barrier between anon_vma init and vma->anon_vma publish. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-416. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98467] Fix null ptr deref on nested wp/unmap, teardown race
Fix null ptr deref on nested wp/unmap, teardown race. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98512] RCU-free the scheduler-containing nouveau_sched
RCU-free the scheduler-containing nouveau_sched. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98508] fix NULL pointer dereference on fence allocation failure
fix NULL pointer dereference on fence allocation failure. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98510] nuke PTs only after unlinking contested VMAs
nuke PTs only after unlinking contested VMAs. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98459] balance the parent hold in hci_bind_bis
balance the parent hold in hci_bind_bis(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98501] fix use-after-free on input2 registration failure
fix use-after-free on input2 registration failure. Red Hat rates this moderate (CVSS 5.1). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98462] fix CIS hold ownership on reuse
fix CIS hold ownership on reuse. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-416. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Medium [CVE-2026-98444] drop dquot flush lock when we can't find a buffer to flush
drop dquot flush lock when we can't find a buffer to flush. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-833. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98511] don't bump pin count on failed re-pin in nouveau_bo_pin_locked
don't bump pin count on failed re-pin in nouveau_bo_pin_locked(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98456] fix race in read_unconf_index_list
fix race in read_unconf_index_list(). Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.