Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3506 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1043 high, 2345 medium, 116 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Medium [CVE-2026-99119] actually validate userq BOs
actually validate userq BOs. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-99213] treat TCP_CLOSING as once-established
treat TCP_CLOSING as once-established. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99116] do not inherit the Rx association on clone
do not inherit the Rx association on clone. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-99216] Don't reset VMBus connection state on error/exit paths
Don't reset VMBus connection state on error/exit paths. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-459. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99120] Cope with the SS bit being set in #NPF exit codes
Cope with the SS bit being set in #NPF exit codes. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-99182] Fix shift-out-of-bounds for aggregated ALH capture
Fix shift-out-of-bounds for aggregated ALH capture. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1335. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99174] free the sbi after a grace period
free the sbi after a grace period. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Low [CVE-2026-99149] Denial of Service via resource leak in amdgpu_gem_userptr_ioctl
Denial of Service via resource leak in amdgpu_gem_userptr_ioctl. Red Hat rates this low (CVSS 2.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat package: kernel.
Low [CVE-2026-99140] Denial of Service via race condition in tracing subsystem
Denial of Service via race condition in tracing subsystem. Red Hat rates this low (CVSS 1.9). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99136] Data corruption via race condition in dm-crypt
Data corruption via race condition in dm-crypt. Red Hat rates this low (CVSS 2.5). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99123] connection hijacking via missing packet source validation in virtio vsock
connection hijacking via missing packet source validation in virtio vsock. Red Hat rates this low (CVSS 3.6). Weakness: CWE-940. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99111] fix data corruption with concurrent writes and O_TRUNC
fix data corruption with concurrent writes and O_TRUNC. Red Hat rates this low (CVSS 3.3). Weakness: CWE-413. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Low [CVE-2026-99211] reset skb headers before unicast and multicast filtering
reset skb headers before unicast and multicast filtering. Red Hat rates this low (CVSS 3.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99172] drop the mqueue mount with kern_unmount on setup failure
drop the mqueue mount with kern_unmount() on setup failure. Red Hat rates this low (CVSS 2.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Low [CVE-2026-99106] free the userptr ranges when a CS fails after parser_bos
free the userptr ranges when a CS fails after parser_bos. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Low [CVE-2026-99190] fix memory leak in gpiod_set_array_value_complex on error paths
fix memory leak in gpiod_set_array_value_complex() on error paths. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
High [CVE-2026-99099] Fix AMD TLBI Erratum #1718
Fix AMD TLBI Erratum #1718. Red Hat rates this moderate (CVSS 7). Weakness: CWE-440. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-99090] serialize vblank counter reads against GPU reset
serialize vblank counter reads against GPU reset. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99097] reject zero-sized allocations in tee_dyn_shm_alloc_helper
reject zero-sized allocations in tee_dyn_shm_alloc_helper(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-99094] fix TX descriptor bounds check
fix TX descriptor bounds check. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-193. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.