Red Hat Linux Linux Kernel Vulnerabilities & Security Advisories
3505 advisories tracked · Red Hat Security Data API · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Linux Kernel, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 1031 high, 2355 medium, 116 low.
Get an email when Red Hat Linux Kernel publishes the next one.
See Red Hat Linux Kernel's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat Linux Kernel advisories
Medium [CVE-2026-118593 +1] local_bh imbalance in seg6_input_core drop path (incomplete fix for CVE-2026-46099)
local_bh imbalance in seg6_input_core() drop path (incomplete fix for CVE-2026-46099). Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-667. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat OpenShift Container Platform 5; Red Hat package: bpftool; and 27 more. Affected products named by the advisory: Red Hat package: kernel-64k-core; Red Hat package: kernel-64k-debug-core; Red Hat package: kernel-64k-debug-devel-matched; Red Hat package: kernel-64k-debug-modules-core; and 23 more.
Medium [CVE-2026-99194] Denial of Service via NULL pointer dereference in Aeroflex Ethernet driver
Denial of Service via NULL pointer dereference in Aeroflex Ethernet driver. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99151] Denial of Service via NULL pointer dereference in AMD display driver
Denial of Service via NULL pointer dereference in AMD display driver. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99150] Denial of Service via double reference count drop in amdgpu debugfs
Denial of Service via double reference count drop in amdgpu debugfs. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99147] Denial of Service via improper locked object handling in drm_exec
Denial of Service via improper locked object handling in drm_exec. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-99146] Denial of Service via unvalidated DMC firmware load address in i915 driver
Denial of Service via unvalidated DMC firmware load address in i915 driver. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99143] Denial of Service via out-of-bounds access in tracing predicate parsing
Denial of Service via out-of-bounds access in tracing predicate parsing. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-99142] Denial of Service via out-of-bounds write in tracing subsystem
Denial of Service via out-of-bounds write in tracing subsystem. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-99139] privilege escalation via use-after-free in do_tcp_getsockopt
privilege escalation via use-after-free in do_tcp_getsockopt. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99134] Denial of Service via race condition in mac802154
Denial of Service via race condition in mac802154. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat OpenShift Container Platform 4; Red Hat package: kernel.
Medium [CVE-2026-99135] Denial of Service via infinite loop in dm-integrity discard handling
Denial of Service via infinite loop in dm-integrity discard handling. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-99133] Denial of Service via improper receive window handling in af_iucv
Denial of Service via improper receive window handling in af_iucv. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99131] Disk quota bypass via improper capability check
Disk quota bypass via improper capability check. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99132] Denial of Service via deadlock in XFS superblock buffer synchronization
Denial of Service via deadlock in XFS superblock buffer synchronization. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-833. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99128] Denial of Service via improper SCTP chunk length validation
Denial of Service via improper SCTP chunk length validation. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99129] Security bypass via race condition in SELinux BPF token validation
Security bypass via race condition in SELinux BPF token validation. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-99127] Denial of Service via misaligned memory fragment allocations in page_pool
Denial of Service via misaligned memory fragment allocations in page_pool. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-131. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99126] Denial of service via null pointer dereference in s390/ctcm
Denial of service via null pointer dereference in s390/ctcm. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99124] Information disclosure via out-of-bounds read in s390 PCI error reporting
Information disclosure via out-of-bounds read in s390 PCI error reporting. Red Hat rates this moderate (CVSS 5.1). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-99122] Denial of Service via unvalidated packet source in VMCI sockets
Denial of Service via unvalidated packet source in VMCI sockets. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-346. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.