Red Hat Linux Red Hat Enterprise Linux Vulnerabilities & Security Advisories
1246 advisories tracked · Red Hat Security Data API · 3 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Red Hat Enterprise Linux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 805 high, 390 medium, 17 low.
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux Red Hat Enterprise Linux advisories
High [CVE-2026-48962] Arbitrary code execution via attacker-controlled output glob
Arbitrary code execution via attacker-controlled output glob. Red Hat rates this important (CVSS 7.8). Weakness: CWE-94. Affected package(s): perl:5.32, perl-IO-Compress. Resolved in Red Hat advisory RHSA-2026:30115 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 7 more.
High [CVE-2026-45984] Fix use-after-free in iomap inline data write path
Fix use-after-free in iomap inline data write path. Red Hat rates this important (CVSS 7.8). Weakness: CWE-826. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:33743 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux AppStream E4S (v.9.4); Red Hat Enterprise Linux AppStream EUS (v.9.6); Red Hat Enterprise Linux AppStream (v. 9); Red Hat Enterprise Linux BaseOS (v. 8); and 22 more.
High [CVE-2026-46099] fix NOREF dst use in seg6 and rpl lwtunnels
fix NOREF dst use in seg6 and rpl lwtunnels. Red Hat rates this important (CVSS 7). Weakness: CWE-911. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-45972] fix potential UAF and double free in smb2_open_file()
fix potential UAF and double free in smb2_open_file(). Red Hat rates this important (CVSS 7). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-46090] Fix peer runtime UAF during format-change stop
Fix peer runtime UAF during format-change stop. Red Hat rates this important (CVSS 7). Weakness: CWE-364. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:27354 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 7 more.
High [CVE-2026-46033] authencesn - reject short ahash digests during instance creation
authencesn - reject short ahash digests during instance creation. Red Hat rates this important (CVSS 7). Weakness: CWE-1284. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-45998] Fix potential UAF after skb_unshare() failure
Fix potential UAF after skb_unshare() failure. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:34911 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-46054] fix overlayfs mmap() and mprotect() access checks
fix overlayfs mmap() and mprotect() access checks. Red Hat rates this important (CVSS 7). Weakness: CWE-280. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:30848 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
High [CVE-2026-45898] Fix workqueue list corruption by removing work_list
Fix workqueue list corruption by removing work_list. Red Hat rates this important (CVSS 7). Weakness: CWE-1341. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:30129 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.6 Extended Update Support.
High [CVE-2026-45852] Fix double free in rxe_srq_from_init
Fix double free in rxe_srq_from_init. Red Hat rates this important (CVSS 7). Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:25120 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 5 more.
High [CVE-2026-48864] Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious.solv page data. Red Hat rates this moderate (CVSS 7.8). Weakness: CWE-787. Affected package(s): libsolv, libsolv-main. Resolved in Red Hat advisory RHSA-2026:28236 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 7; Red Hat OpenShift Container Platform 4; Red Hat Satellite 6; and 12 more.
High [CVE-2026-40033] Remote code execution via heap-buffer-overflow in gdi_CacheToSurface
Remote code execution via heap-buffer-overflow in gdi_CacheToSurface. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-42496] Path traversal via crafted symlinks allows arbitrary file access
Path traversal via crafted symlinks allows arbitrary file access. Red Hat rates this important (CVSS 8.2). Weakness: CWE-22. Affected package(s): perl:5.32, perl-Archive-Tar. Resolved in Red Hat advisory RHSA-2026:30852 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-46243] Linux kernel: smb: client: reject userspace cifs.spnego descriptions
Linux kernel: smb: client: reject userspace cifs.spnego descriptions. Red Hat rates this important (CVSS 7.8). Weakness: CWE-825. Affected package(s): kernel, kernel-rt, rhcos, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:33219 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Enterprise Linux 7 Extended Lifecycle Support; and 18 more.
High [CVE-2026-43503] propagate shared-frag marker through frag-transfer helpers
propagate shared-frag marker through frag-transfer helpers. Red Hat rates this important (CVSS 7). Weakness: CWE-664. Affected package(s): rhcos, kernel-rt, kernel, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:23470 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 17 more.
High [CVE-2026-39821] Privilege escalation via incorrect Punycode label processing
Privilege escalation via incorrect Punycode label processing. Red Hat rates this important (CVSS 8.2). Weakness: CWE-1289. Affected package(s): rhacm2/observatorium-rhel9:1782157471, rhacm2/prometheus-alertmanager-rhel9:1782156920, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519, rhacm2/thanos-rhel9:1782465412, rhacm2/grafana-dashboard-loader-rhel9:1782383255, rhacm2/acm-prometheus-config-reloader-rhel9:1782157632. Resolved in Red Hat advisory RHSA-2026:35830 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift Container Platform 4.22; RHEM 1.0 for RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); and 92 more.
High [CVE-2026-9256] code execution and denial of service
code execution and denial of service. Red Hat rates this important (CVSS 8.1). Weakness: CWE-122. Affected package(s): nginx, nginx:1.26, nginx-main, nginx:1.24, discovery/discovery-ui-rhel9:1782756541. Resolved in Red Hat advisory RHSA-2026:29874 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NGINX Plus; NGINX Open Source; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 5 more.
High [CVE-2026-9277] Arbitrary code execution via command injection due to unescaped line terminators
Arbitrary code execution via command injection due to unescaped line terminators. Red Hat rates this important (CVSS 8.1). Weakness: CWE-78. Affected package(s): openshift4/ose-console-rhel9:1782308675, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9:1782839981, openshift-service-mesh/kiali-rhel9:1780916345, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519, quay/quay-rhel8:1781878070. Resolved in Red Hat advisory RHSA-2026:26077 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat Developer Hub 1.10; Red Hat Developer Hub 1.9; Red Hat Discovery 2; and 26 more.
High [CVE-2026-39829] Denial of Service via crafted public key with excessive parameters
Denial of Service via crafted public key with excessive parameters. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1284. Affected package(s): advanced-cluster-security/rhacs-roxctl-rhel8:1781686458, advanced-cluster-security/rhacs-roxctl-rhel8:1781686446, buildah. Resolved in Red Hat advisory RHSA-2026:29455 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: RHEM 1.0 for RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux AppStream (v. 9); and 45 more.
High [CVE-2026-39830] Denial of Service via resource leak from unsolicited SSH responses
Denial of Service via resource leak from unsolicited SSH responses. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): buildah. Resolved in Red Hat advisory RHSA-2026:29455 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: RHEM 1.0 for RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux AppStream (v. 9); and 45 more.