Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3506 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1041 high, 2347 medium, 116 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Medium [CVE-2026-98905] Properly acquire queue buffers in CRIU restore
Properly acquire queue buffers in CRIU restore. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
Medium [CVE-2026-99087] fix NULL pointer dereference when the 'R' flag is used
fix NULL pointer dereference when the 'R' flag is used. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99053] hold a reference to nodes found by link name
hold a reference to nodes found by link name. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99084] take no inode lock on an immutable directory
take no inode lock on an immutable directory. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-412. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-99066] init_can_skb: restore skb header initialization
init_can_skb(): restore skb header initialization. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99054] destroy topsrv workqueues before closing connections
destroy topsrv workqueues before closing connections. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99061] fix P2P device removal race in brcmf_detach
fix P2P device removal race in brcmf_detach(). Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99058] Fix NULL current_pwq deref in chained work check
Fix NULL current_pwq deref in chained work check. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99052] preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-281. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99065] Handle cpu hotplug race in guarantee_active_cpus
Handle cpu hotplug race in guarantee_active_cpus(). Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-99055] reject net_iov in zerocopy receive mapping hints
reject net_iov in zerocopy receive mapping hints. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-99086] validate the superblock on resume
validate the superblock on resume. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel.
Medium [CVE-2026-98916] check link is beaconing for color change
check link is beaconing for color change. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-628. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98914] cap ATOM command table nesting depth
cap ATOM command table nesting depth. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98912] Reject reads that cannot fit the next event
Reject reads that cannot fit the next event. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98961] unlock inode and extent in caller when io_uring read extent fails
unlock inode and extent in caller when io_uring read extent fails. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-98958] account non-AQL frames per peer rather than per link
account non-AQL frames per peer rather than per link. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-98964] use the local P2P device on metadata allocation failure
use the local P2P device on metadata allocation failure. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-98930] Fix IRQ injection with SIGP Stop and Store Status
Fix IRQ injection with SIGP Stop and Store Status. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-413. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-98933] use shorter 120ms post resume hold for SS root hubs
use shorter 120ms post resume hold for SS root hubs. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-821. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.