Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2536 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 896 high, 1323 medium, 265 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
High [CVE-2026-96643] Denial of Service via repeated EXIF headers
Denial of Service via repeated EXIF headers. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. Red Hat lists fixing advisory RHSA-2026:92861 with package python3.12-pillow-0:13.0.0-1.el9pc, rhoai/odh-openvino-model-server-rhel9:1792683954, rhoai/odh-training-rocm64-torch29-py312-rhel9:1792890009, rhoai/odh-training-cuda128-torch29-py312-rhel9:1792890022. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
High [CVE-2026-96644] Denial of Service via out-of-bounds read in metafile parser
Denial of Service via out-of-bounds read in metafile parser. Red Hat rates this important (CVSS 7.1). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:92510 with package rhoai/odh-openvino-model-server-rhel9:1792683954. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
High [CVE-2026-114144] Denial of Service via unbounded integer parsing
Denial of Service via unbounded integer parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1322. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: cockpit-image-builder.
High [CVE-2026-114143] Denial of Service via long dotted keys in TOML input
Denial of Service via long dotted keys in TOML input. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: cockpit-image-builder.
High [CVE-2026-114141] Denial of Service via crafted array-of-tables headers
Denial of Service via crafted array-of-tables headers. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1322. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: cockpit-image-builder.
High [CVE-2026-114126] Arbitrary code execution via exposed WebSocket authentication token
Arbitrary code execution via exposed WebSocket authentication token. Red Hat rates this important (CVSS 8.8). Weakness: CWE-201. Red Hat lists fixing advisory RHSA-2026:88541 with package grafana13-2-main-13.2.4-0.3.hum1, grafana13-1-main-13.1.8-0.4.hum1, grafana12-4-main-12.4.13-0.3.hum1. Affected products named by the advisory: Node HealthCheck Operator; Red Hat Build of Podman Desktop; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat package: grafana.
High [CVE-2026-92183] Arbitrary code execution via stack-based buffer overflow in APNG parser
Arbitrary code execution via stack-based buffer overflow in APNG parser. Red Hat rates this important (CVSS 7.8). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: gimp.
High [CVE-2026-114125] Arbitrary code execution via insufficient message-origin restrictions
Arbitrary code execution via insufficient message-origin restrictions. Red Hat rates this important (CVSS 8.8). Weakness: CWE-346. Red Hat lists fixing advisory RHSA-2026:88541 with package grafana13-2-main-13.2.4-0.3.hum1, grafana13-1-main-13.1.8-0.4.hum1, grafana12-4-main-12.4.13-0.3.hum1. Affected products named by the advisory: Node HealthCheck Operator; Red Hat Build of Podman Desktop; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat package: grafana.
High [CVE-2026-114045] heap buffer overflow in server rdpsnd via crafted audio formats
heap buffer overflow in server rdpsnd via crafted audio formats. Red Hat rates this important (CVSS 8.8). Weakness: CWE-122. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
High [CVE-2026-105483] TLS certificate hostname bypass via fullwidth-digit IP hostnames
TLS certificate hostname bypass via fullwidth-digit IP hostnames. Red Hat rates this important (CVSS 7.4). Weakness: CWE-297. Red Hat lists fixing advisory RHSA-2026:89206 with package nodejs:24-9080020261027142403.rhel9, nodejs:24-8100020261027151919.6d880403, nodejs22-main-10.9.9-1.22.23.4.2.3.2.3.hum1, nodejs26-main-11.20.0-1.26.12.1.0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 2 more. Affected products named by the advisory: Red Hat package: nodejs24; Red Hat package: nodejs26.
High [CVE-2026-106069] TLS certificate hostname bypass via non-canonical IP hostnames
TLS certificate hostname bypass via non-canonical IP hostnames. Red Hat rates this important (CVSS 7.4). Weakness: CWE-297. Red Hat lists fixing advisory RHSA-2026:92378 with package nodejs:24-9080020261027142403.rhel9, nodejs:24-8100020261027151919.6d880403. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: nodejs22; and 2 more. Affected products named by the advisory: Red Hat package: nodejs24; Red Hat package: nodejs26.
High [CVE-2026-105482] dns.resolve truncates hostnames containing a NUL character
dns.resolve truncates hostnames containing a NUL character. Red Hat rates this important (CVSS 7.4). Weakness: CWE-158. Red Hat lists fixing advisory RHSA-2026:92378 with package nodejs:24-9080020261027142403.rhel9, nodejs:24-8100020261027151919.6d880403, nodejs22-main-10.9.9-1.22.23.4.2.3.2.3.hum1, nodejs26-main-11.20.0-1.26.12.1.0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: nodejs22; and 2 more. Affected products named by the advisory: Red Hat package: nodejs24; Red Hat package: nodejs26.
Medium [CVE-2026-96636] Denial of Service via decompression bomb check bypass in multi-frame images
Denial of Service via decompression bomb check bypass in multi-frame images. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-409. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
Medium [CVE-2026-96637] Denial of Service via decompression bomb bypass in SPIDER images
Denial of Service via decompression bomb bypass in SPIDER images. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-409. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
Medium [CVE-2026-96641] Denial of Service via integer overflow in text-width calculation
Denial of Service via integer overflow in text-width calculation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-190. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
Medium [CVE-2026-96642] Denial of Service via negative archive member size in TarIO
Denial of Service via negative archive member size in TarIO. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-835. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
Medium [CVE-2026-96638] Denial of Service via crafted RLE BMP image
Denial of Service via crafted RLE BMP image. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-409. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
Medium [CVE-2026-114437] client IP spoofing via unverified direct connection in ClientIPFromXFF middleware
client IP spoofing via unverified direct connection in ClientIPFromXFF middleware. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-346. Affected products named by the advisory: Logging Subsystem for Red Hat OpenShift; Multicluster Engine for Kubernetes; OpenShift Pipelines; OpenShift Serverless; and 11 more. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; Red Hat OpenShift Dev Spaces; and 7 more.
Medium [CVE-2026-105923] Denial of Service via crafted SVG in VectorImage
Denial of Service via crafted SVG in VectorImage. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Red Hat lists fixing advisory RHSA-2026:89193 with package qt6-main-6.12.0-1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: qt6.
Medium [CVE-2026-114105] Privilege escalation via unmasked permissions during archive extraction
Privilege escalation via unmasked permissions during archive extraction. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-278. Affected products named by the advisory: Cost Management On Premise; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Build of Podman Desktop; Red Hat Developer Hub; and 8 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; Red Hat OpenShift AI (RHOAI); and 4 more.