Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2510 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 899 high, 1301 medium, 258 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
High [CVE-2026-119528] Gimp: gimp: stack buffer overflow in psd image resource header loader
A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This Important flaw affects GIMP’s PSD (Photoshop) file import plug-in. Exploitation requires user interaction to open a crafted PSD file (or otherwise cause the PSD plug-in to parse untrusted image resource headers). Successful exploitation can crash the plug-in process and may allow arbitrary code execution in the context of the user running GIMP. Red Hat severity: Important — CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Weakness: CWE-121. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: gimp-devel-tools; Red Hat package: gimp-libs; Red Hat package: gimp.src; Red Hat package: gimp-help-browser.
High [CVE-2026-103963] Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service
Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service. Red Hat rates this important (CVSS 7.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: glib-networking.src.
Medium [CVE-2026-115455] Stack overflow in std::bitset on libstdc++
Stack overflow in std::bitset on libstdc++. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: cpp; Red Hat package: gcc-c++; and 31 more. Affected products named by the advisory: Red Hat package: gcc-gfortran; Red Hat package: gcc-offload-amdgcn; Red Hat package: gcc-offload-nvptx; Red Hat package: gcc-plugin-annobin; and 27 more.
Medium [CVE-2026-118593 +1] local_bh imbalance in seg6_input_core drop path (incomplete fix for CVE-2026-46099)
local_bh imbalance in seg6_input_core() drop path (incomplete fix for CVE-2026-46099). Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-667. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat OpenShift Container Platform 5; Red Hat package: bpftool; and 27 more. Affected products named by the advisory: Red Hat package: kernel-64k-core; Red Hat package: kernel-64k-debug-core; Red Hat package: kernel-64k-debug-devel-matched; Red Hat package: kernel-64k-debug-modules-core; and 23 more.
Low [CVE-2026-118475] Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk
A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the application to read past the allocated buffer. This issue can lead to an application crash, resulting in a Denial of Service (DoS), or potentially expose sensitive memory contents. This vulnerability is rated as Moderate impact because exploitation requires user interaction to open a specially crafted image in an interactive desktop session, limiting the blast radius to the permissions of the local user. Successful exploitation is constrained to local application crashes or limited heap memory disclosure during metadata processing. Red Hat severity: Low — CVSS 3.6 (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L). Weakness: CWE-125. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: eog.
High [CVE-2026-119196] Denial of Service via constructed bit string decoding
Denial of Service via constructed bit string decoding. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Exploit Intelligence; Fence Agents Remediation Operator; Lightspeed Core; and 24 more. Affected products named by the advisory: Migration Toolkit for Applications 8; Migration Toolkit for Containers; Migration Toolkit for Virtualization; OpenShift Lightspeed; and 20 more.
High [CVE-2026-119195] Denial of Service via quadratic processing of fragmented ASN.1 data
Denial of Service via quadratic processing of fragmented ASN.1 data. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1046. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Exploit Intelligence; Fence Agents Remediation Operator; Lightspeed Core; and 24 more. Affected products named by the advisory: Migration Toolkit for Applications 8; Migration Toolkit for Containers; Migration Toolkit for Virtualization; OpenShift Lightspeed; and 20 more.
High [CVE-2026-119194] Denial of Service via hash collisions in schemaless decoding
Denial of Service via hash collisions in schemaless decoding. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Exploit Intelligence; Fence Agents Remediation Operator; Lightspeed Core; and 24 more. Affected products named by the advisory: Migration Toolkit for Applications 8; Migration Toolkit for Containers; Migration Toolkit for Virtualization; OpenShift Lightspeed; and 20 more.
High [CVE-2026-119188] Denial of Service via interleaved record during fragmented TLS handshake
Denial of Service via interleaved record during fragmented TLS handshake. Red Hat rates this important (CVSS 7.5). Weakness: CWE-248. Affected products named by the advisory: Node HealthCheck Operator; OpenShift Pipelines; OpenShift Serverless; Red Hat AMQ Broker 7; and 17 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Build of Podman Desktop; Red Hat Ceph Storage 4; and 13 more.
High [CVE-2026-119187] Denial of Service via call stack exhaustion in TLS record processing
Denial of Service via call stack exhaustion in TLS record processing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Node HealthCheck Operator; OpenShift Pipelines; OpenShift Serverless; Red Hat AMQ Broker 7; and 17 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Build of Podman Desktop; Red Hat Ceph Storage 4; and 13 more.
High [CVE-2026-118772] Denial of Service via inefficient regular expression in email validation
Denial of Service via inefficient regular expression in email validation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Affected products named by the advisory: Cryostat 4; Migration Toolkit for Containers; OpenShift Serverless; Red Hat Build of Podman Desktop; and 10 more. Affected products named by the advisory: Red Hat Data Grid 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 6 more.
High [CVE-2026-118764] Denial of Service via crafted glob pattern expansion
Denial of Service via crafted glob pattern expansion. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. Affected products named by the advisory: Cost Management On Premise; Cryostat 4; Exploit Intelligence; Migration Toolkit for Applications 8; and 53 more. Affected products named by the advisory: Migration Toolkit for Containers; Node HealthCheck Operator; OpenShift Lightspeed; OpenShift Pipelines; and 49 more.
High [CVE-2019-25781] Denial of Service via inefficient inline link parsing
A flaw was found in Python-Markdown. An algorithmic complexity vulnerability in inline link parsing allows a remote attacker to cause a Denial of Service (DoS) by exhausting CPU resources. By submitting specially crafted Markdown text containing repeated unmatched brackets, an attacker can force the parser into inefficient scanning loops that consume excessive CPU time and stall worker processes. Red Hat severity: Important — CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-606. Affected Red Hat products: Red Hat AI Inference Server; Red Hat Ansible Automation Platform 2; Red Hat Developer Hub 1; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4; Red Hat Satellite 6; Red Hat Trusted Artifact Signer; Self-service automation portal 2. Red Hat lists Red Hat OpenShift AI (RHOAI) as not affected. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: python-markdown.
Medium [CVE-2026-119189] Certificate validation bypass via unenforced path length constraints
Certificate validation bypass via unenforced path length constraints. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-295. Affected products named by the advisory: Node HealthCheck Operator; OpenShift Pipelines; OpenShift Serverless; OpenShift Service Mesh 3; and 18 more. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat Ansible Automation Platform 2; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Build of Podman Desktop; and 14 more.
Medium [CVE-2026-118773] Denial of Service (DoS) via incomplete traversal cancellation
Denial of Service (DoS) via incomplete traversal cancellation. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Cost Management On Premise; Cryostat 4; Exploit Intelligence; Migration Toolkit for Applications 8; and 53 more. Affected products named by the advisory: Migration Toolkit for Containers; Node HealthCheck Operator; OpenShift Lightspeed; OpenShift Pipelines; and 49 more.
Medium [CVE-2026-119143] Denial of Service via unvalidated zero-length stream operations
Denial of Service via unvalidated zero-length stream operations. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119142] Denial of Service via canceled asynchronous function calls
Denial of Service via canceled asynchronous function calls. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119141] Denial of Service via host panic during memory reallocation
Denial of Service via host panic during memory reallocation. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119140] Denial of Service via thread.yield in start functions
Denial of Service via thread.yield in start functions. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119139] Denial of Service via unhandled assertion in component function call
Denial of Service via unhandled assertion in component function call. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.