Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2534 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 897 high, 1326 medium, 259 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-112058] Denial of Service via out-of-bounds read in set_PTT
Denial of Service via out-of-bounds read in set_PTT. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libdvdnav.
Medium [CVE-2026-112008] Denial of Service via heap-based buffer overflow in mng_read_ordr
Denial of Service via heap-based buffer overflow in mng_read_ordr(). Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libmng.
Low [CVE-2026-112026] light0011 cms: Information disclosure via weak password hashing
light0011 cms: Information disclosure via weak password hashing. Red Hat rates this low (CVSS 3.7). Weakness: CWE-916. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: goose; Red Hat package: virt-firmware-rs.
High [CVE-2026-111881] Denial of Service via crafted clipboard bitmap image
Denial of Service via crafted clipboard bitmap image. Red Hat rates this important (CVSS 7.6). Weakness: CWE-191. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
High [CVE-2026-111880] Denial of Service via heap out-of-bounds write in NTLM authentication
Denial of Service via heap out-of-bounds write in NTLM authentication. Red Hat rates this important (CVSS 7.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: freerdp.
High [CVE-2026-110752] Denial of Service via excessive memory allocation in fragment selector
Denial of Service via excessive memory allocation in fragment selector. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
High [CVE-2026-62439] Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) via an application crash. Red Hat severity: Important — CVSS 7 (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). Weakness: CWE-190. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: gimp.
High [CVE-2026-68498] Denial of Service via excessively long JSON property names
Denial of Service via excessively long JSON property names. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:88156 with package ocp-tools-4/jenkins-rhel8:1792044386, ocp-tools-4/jenkins-rhel9:1792040096, ocp-tools-4/jenkins-rhel9:1792040287, ocp-tools-4/jenkins-rhel9:1792040131. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; OpenShift Serverless; Red Hat AI Inference Server; and 20 more. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat Ansible Automation Platform 2; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apache Camel - HawtIO 4; and 16 more.
High [CVE-2026-86047] SQL injection via improper identifier quoting
SQL injection via improper identifier quoting. Red Hat rates this important (CVSS 7.7). Weakness: CWE-89. Red Hat lists fixing advisory RHSA-2026:84689 with package mariadb11-8-main-11.8.9-0.1.hum1, mariadb10-11-main-10.11.18-4.1.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenStack Platform 13 (Queens); Red Hat package: mariadb10.11; Red Hat package: mariadb11.8.
High [CVE-2026-85746] Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:88864 with package mariadb10-11-main-10.11.18-4.1.2.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 4 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenStack Platform 13 (Queens); Red Hat package: mariadb10.11; Red Hat package: mariadb11.8.
High [CVE-2026-92262] Numerous issues caused by historical #mysql50# tablename encoding bypass.
Numerous issues caused by historical #mysql50# tablename encoding bypass. Red Hat rates this important (CVSS 8.8). Weakness: CWE-73. Red Hat lists fixing advisory RHSA-2026:92905 with package mariadb10-11-main-10.11.18-4.1.10.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 4 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenStack Platform 13 (Queens); Red Hat package: mariadb10.11; Red Hat package: mariadb11.8.
High [CVE-2026-97380] Privilege escalation via empty password in GRANT PROXY statement
Privilege escalation via empty password in GRANT PROXY statement. Red Hat rates this important (CVSS 8.8). Weakness: CWE-266. Red Hat lists fixing advisory RHSA-2026:84689 with package mariadb11-8-main-11.8.9-0.1.hum1, mariadb10-11-main-10.11.18-4.1.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenStack Platform 13 (Queens); Red Hat package: mariadb10.11; Red Hat package: mariadb11.8.
High [CVE-2026-111382] Arbitrary code execution via crafted display frames
Arbitrary code execution via crafted display frames. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
High [CVE-2026-111381] Arbitrary code execution via crafted persistent cache file
Arbitrary code execution via crafted persistent cache file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
High [CVE-2026-111379] Arbitrary code execution via crafted persistent cache file
Arbitrary code execution via crafted persistent cache file. Red Hat rates this important (CVSS 7.3). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
High [CVE-2026-111378] Denial of Service via memory exhaustion in NLA frame parser
Denial of Service via memory exhaustion in NLA frame parser. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-89088] Parted: parted: denial of service via heap buffer overflow during fat16 resize
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS). This vulnerability is rated as Moderate severity rather than Important because exploitation requires local user interaction with a specifically crafted FAT16 storage device or image, limiting the blast radius to a denial of service. Under default Red Hat Enterprise Linux configurations, partition resizing operations using parted or libparted are interactive administrative tasks that are not routinely invoked automatically on untrusted media. Consequently, an attacker cannot remotely compromise the system or escalate privileges, as the defect only triggers an immediate application termination during targeted filesystem adjustments. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-89085] Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption. This vulnerability is rated as Moderate impact because exploitation requires a local user or automated process to inspect or resize an untrusted, specially crafted FAT32 filesystem using parted. In typical Red Hat Enterprise Linux deployments, parted is executed manually by administrative users rather than operating as an unprivileged or network-exposed daemon. Consequently, the flaw cannot be triggered without direct user interaction or file processing, and any resulting heap corruption remains confined to the executing process, primarily causing a denial of service. Red Hat severity: Moderate — CVSS 6.6 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-110759] Text::CSV_XS: Data corruption via trailing carriage return in empty fields
Text::CSV_XS: Data corruption via trailing carriage return in empty fields. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1286. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-110758] Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping
Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-124. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.