Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3505 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 1031 high, 2355 medium, 116 low.
Get an email when Red Hat Linux Kernel publishes the next one.
See Red Hat Linux Kernel's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Medium [CVE-2026-98707] shut down RX BA session timer on teardown
shut down RX BA session timer on teardown. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98720] Force MSR bitmap refresh if runtime eVMCS controls are modified
Force MSR bitmap refresh if runtime eVMCS controls are modified. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-270. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98722] Fix divide error when erase_size is zero
Fix divide error when erase_size is zero. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-98714] Update control fields on #VMEXIT if and only if VMRUN succeeded
Update control fields on #VMEXIT if and only if VMRUN succeeded. Red Hat rates this moderate (CVSS 5.6). Weakness: CWE-252. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98753] restore TTY_IO_ERROR on activation failure
restore TTY_IO_ERROR on activation failure. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98739] Fix initial port reference race
Fix initial port reference race. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98756] Fix NULL pointer dereference in cdns3_pci_probe
Fix NULL pointer dereference in cdns3_pci_probe. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-98767] fix IRQ storm on invalid event buffer count
fix IRQ storm on invalid event buffer count. Red Hat rates this moderate (CVSS 5.1). Weakness: CWE-390. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98773] skip URB restart in port_shutdown if disconnected
skip URB restart in port_shutdown if disconnected. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-98735] Serialize ACL scheduling with channel deletion
Serialize ACL scheduling with channel deletion. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98775] fix use-after-free on SLOT_ALLOC failure
fix use-after-free on SLOT_ALLOC failure. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98736] Lock parent access during enhanced SCO setup
Lock parent access during enhanced SCO setup. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Medium [CVE-2026-98785] check dc_state_create_copy for NULL in dm_suspend
check dc_state_create_copy() for NULL in dm_suspend. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Medium [CVE-2026-98744] fix uninitialized stream_config->type
fix uninitialized stream_config->type. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98730] reject oversized TX packets in send_frame
reject oversized TX packets in send_frame(). Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98763] clear both ep_in and ep_out for non-ep0 control endpoints
clear both ep_in and ep_out for non-ep0 control endpoints. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98752] fix tty_port_tty_vhangup race
fix tty_port_tty_vhangup() race. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98731] fix plen overflow in btintel_pcie_recv_frame
fix plen overflow in btintel_pcie_recv_frame(). Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98759] fix uninitialized typec_partner_desc in cd321x_update_work
fix uninitialized typec_partner_desc in cd321x_update_work(). Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-824. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel.
Medium [CVE-2026-98757] fix use-after-free in cdns3_gadget_exit
fix use-after-free in cdns3_gadget_exit(). Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.