Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
1641 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 35 critical, 621 high, 814 medium, 169 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-90995] Local denial of service due to NULL pointer dereference in PAM responder
Local denial of service due to NULL pointer dereference in PAM responder. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: sssd.
Medium [CVE-2026-90781] Denial of Service via off-by-one stack buffer overflow
Denial of Service via off-by-one stack buffer overflow. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-120. Red Hat lists fixing advisory RHSA-2026:40573 with package alsa-lib-main-1.2.16.1-2.hum1, alsa-lib-main-1.2.16.1-2.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: alsa-lib.
Medium [CVE-2026-90771] Prototype Pollution via custom messages
Prototype Pollution via custom messages. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:67610 with package grafana13-1-main-13.1.3-0.9.hum1, grafana13-2-main-13.2.1-0.4.hum1, grafana12-4-main-12.4.10-0.3.hum1. Affected products named by the advisory: Red Hat Hardened Images; Gatekeeper 3; Migration Toolkit for Containers; Red Hat Build of Podman Desktop; and 8 more. Affected products named by the advisory: Red Hat Data Grid 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 4 more.
Medium [CVE-2022-42917] Privilege escalation via TOCTOU race condition
Privilege escalation via TOCTOU race condition. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: frr.
Medium [CVE-2026-89090] Amazon AWS SDK for Go v2: Denial of Service via crafted event stream header
Amazon AWS SDK for Go v2: Denial of Service via crafted event stream header. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-248. Affected products named by the advisory: AWS Load Balancer Operator; cert-manager Operator for Red Hat OpenShift; Compliance Operator; Confidential Compute Attestation; and 42 more. Affected products named by the advisory: Cryostat 4; Custom Metric Autoscaler operator for Red Hat Openshift; DPU kit for NVIDIA; Exploit Intelligence; and 38 more.
Medium [CVE-2026-89329] Local Denial of Service via Blocking IPC Send Operations
Local Denial of Service via Blocking IPC Send Operations. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-1322. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: device-mapper-multipath.
Medium [CVE-2026-89258] Information disclosure via symlink confinement bypass
Information disclosure via symlink confinement bypass. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-59. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat OpenShift GitOps; Red Hat OpenStack Platform 18.0; Red Hat package: grafana.
Medium [CVE-2026-87859] Log Injection via unescaped double quote in log fields
Log Injection via unescaped double quote in log fields. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-117. Affected products named by the advisory: Cryostat 4; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Fuse 7; and 6 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Openshift Data Foundation 4; Red Hat package: linux-sgx; Red Hat package: nodejs22; and 2 more.
Medium [CVE-2026-89158] Out-of-bounds write via integer overflow on 32-bit platforms
Out-of-bounds write via integer overflow on 32-bit platforms. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 7 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: bootc; Red Hat package: mariadb10.11; and 3 more.
Medium [CVE-2026-89157] Out-of-bounds write via large pattern input
Out-of-bounds write via large pattern input. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 5 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: mariadb10.11; Red Hat package: mariadb11.8; Red Hat package: mingw-pcre2; and 1 more.
Medium [CVE-2026-77159] Unsafe chown in qemuTPMEmulatorPrepareHost allows arbitrary file ownership change via symlink
Unsafe chown in qemuTPMEmulatorPrepareHost() allows arbitrary file ownership change via symlink. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-61. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libvirt.
Medium [CVE-2026-88059] Information Leak via HttpTransferCache Bypass
Information Leak via HttpTransferCache Bypass. Red Hat rates this moderate (CVSS 4). Weakness: CWE-524. Affected products named by the advisory: A-MQ Interconnect 1; Red Hat Ceph Storage 4; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; and 11 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; Red Hat OpenStack Platform 16.2; and 7 more.
Medium [CVE-2026-88057] @angular/core: @angular/compiler: Angular: Arbitrary code execution via sanitization bypass in host bindings
@angular/core: @angular/compiler: Angular: Arbitrary code execution via sanitization bypass in host bindings. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat build of Apicurio Registry 3; Red Hat Ceph Storage 4; Red Hat Enterprise Linux 10; and 12 more. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; and 8 more.
Medium [CVE-2026-88054] Denial of Service via crafted model with empty stack dereference
Denial of Service via crafted model with empty stack dereference. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: tesseract.
Medium [CVE-2026-89045] Denial of Service via negative length parameter
Denial of Service via negative length parameter. Red Hat rates this moderate (CVSS 4). Weakness: CWE-835. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 11 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat build of Quarkus; Red Hat Ceph Storage 9; and 7 more.
Medium [CVE-2026-88050] Out-of-bounds write leads to Denial of Service
Out-of-bounds write leads to Denial of Service. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: tesseract.
Medium [CVE-2026-88914] integer overflow and out-of-bounds read in qtdemux CEA-608 closed-caption parser
integer overflow and out-of-bounds read in qtdemux CEA-608 closed-caption parser. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: gstreamer1-plugins-good; Red Hat package: gstreamer-plugins-good.
Medium [CVE-2026-84828] non-root haclient users can read arbitrary files via pcs host auth --token
non-root haclient users can read arbitrary files via pcs host auth --token. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-732. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 3 more. Affected products named by the advisory: Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; Red Hat package: pcs.
Medium [CVE-2026-88859] javascript execution via spoofed vCard control bypasses mail script-markup restriction
javascript execution via spoofed vCard control bypasses mail script-markup restriction. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-84. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: evolution.
Medium [CVE-2026-61915] VPATCH BYPARAM double-free in CalDAV
VPATCH BYPARAM double-free in CalDAV. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-415. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: cyrus-imapd.