Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3505 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 1034 high, 2352 medium, 116 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Medium [CVE-2026-98470] Don't WARN on an unknown VM ioctl in protected mode
Don't WARN on an unknown VM ioctl in protected mode. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98474] Fix missing device lock in zpci_report_status
Fix missing device lock in zpci_report_status(). Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-413. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98471] Do cache maintenance on the source VM during intra-host migration
Do cache maintenance on the source VM during intra-host migration. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-226. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98476] Fix NULL pointer dereference in ccw_device_get_util_str
Fix NULL pointer dereference in ccw_device_get_util_str(). Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98477] Fix NULL pmu_ctx passed to pmu->sched_task
Fix NULL pmu_ctx passed to pmu->sched_task(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98475] Fix virtual vs physical address confusion
Fix virtual vs physical address confusion. Red Hat rates this moderate (CVSS 5.1). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98569] Reject enabling collect metadata through changelink
Reject enabling collect metadata through changelink. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-694. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98591] Fix bounds check for skb-backed dynptrs
Fix bounds check for skb-backed dynptrs. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-191. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98541] reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT
reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98547] fix integer overflow in prb_calc_retire_blk_tmo
fix integer overflow in prb_calc_retire_blk_tmo(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98545] bound the ATA passthru sense descriptor writes
bound the ATA passthru sense descriptor writes. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-98543] don't assume the inode is locked in path_unlink/path_rmdir
don't assume the inode is locked in path_unlink/path_rmdir. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-413. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98556] reject TSO packets with an out of range MSS
reject TSO packets with an out of range MSS. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1284. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98554] ensure sufficient headroom in vlan_dev_hard_header
ensure sufficient headroom in vlan_dev_hard_header(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98597] include receive overhead in the length check
include receive overhead in the length check. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98598] Prevent rt6_insert_exception for dying fib6_info
Prevent rt6_insert_exception() for dying fib6_info. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98558] flush skb_defer_nodes in dev_cpu_dead
flush skb_defer_nodes in dev_cpu_dead(). Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-459. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Medium [CVE-2026-98544] prevent IOC timer rearm during teardown
prevent IOC timer rearm during teardown. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat package: kernel-rt.
Medium [CVE-2026-98599] Reject non-negative offsets in stack_slot_obj_get_spi
Reject non-negative offsets in stack_slot_obj_get_spi(). Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98587] fix back-transition for iso_resource_auto client resource
fix back-transition for iso_resource_auto client resource. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.