Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2525 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 901 high, 1314 medium, 258 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-119143] Denial of Service via unvalidated zero-length stream operations
Denial of Service via unvalidated zero-length stream operations. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119142] Denial of Service via canceled asynchronous function calls
Denial of Service via canceled asynchronous function calls. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119141] Denial of Service via host panic during memory reallocation
Denial of Service via host panic during memory reallocation. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119140] Denial of Service via thread.yield in start functions
Denial of Service via thread.yield in start functions. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119139] Denial of Service via unhandled assertion in component function call
Denial of Service via unhandled assertion in component function call. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119138] Denial of Service via assertion failure after runtime trap
Denial of Service via assertion failure after runtime trap. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119137] Denial of Service via recursive type drops
Denial of Service via recursive type drops. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119136] Denial of Service via mixed synchronous and asynchronous calls
Denial of Service via mixed synchronous and asynchronous calls. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-1265. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119134] Denial of Service via unbounded memory growth in resource handle tables
Denial of Service via unbounded memory growth in resource handle tables. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-770. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119135] Denial of Service via component stream type mismatch
Denial of Service via component stream type mismatch. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-617. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-119132] Denial of Service via overlapping string transcoding in fused adapters
A flaw was found in wasmtime. This vulnerability allows an untrusted WebAssembly (Wasm) guest program to cause a Denial of Service (DoS) by triggering an unhandled host process crash. When converting text between components using overlapping memory buffers, the runtime panics and terminates the host application instead of safely handling the error. Red Hat severity: Moderate — CVSS 4.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-617. Affected Red Hat products: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-79656] OAuth and OIDC tokens written unredacted to Grafana server logs
OAuth and OIDC tokens written unredacted to Grafana server logs. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-256. Red Hat lists fixing advisory RHSA-2026:90990 with package grafana13-1-main-13.1.8-0.5.hum1, grafana13-2-main-13.2.4-0.4.hum1, grafana12-4-main-12.4.13-0.5.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 6 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more.
Medium [CVE-2026-117548] NULL pointer dereference via ModifyDN using an attribute's schema alias name causes denial of service
NULL pointer dereference via ModifyDN using an attribute's schema alias name causes denial of service. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Directory Server 11; Red Hat Directory Server 12; Red Hat Directory Server 13; Red Hat Enterprise Linux 10; and 10 more. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 6 more.
Low [CVE-2026-119280] Denial of Service via unvalidated lengths during XA recovery
Denial of Service via unvalidated lengths during XA recovery. Red Hat rates this low (CVSS 3.7). Weakness: CWE-130. Affected products named by the advisory: Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat build of Quarkus; Red Hat Enterprise Linux 10; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift AI (RHOAI); Red Hat OpenStack Platform 13 (Queens); and 2 more.
Low [CVE-2026-119133] Undefined behavior via misaligned VMContext layout
Undefined behavior via misaligned VMContext layout. Red Hat rates this low (CVSS 2.6). Weakness: CWE-843. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Low [CVE-2026-119124] Denial of service via heap-based buffer overflow in -morph option
A flaw was found in ImageMagick. An attacker can cause a Denial of Service (DoS) by tricking a user or system into processing a specially crafted image file with the -morph option. This action triggers a heap-based buffer overflow where data is written beyond allocated memory boundaries, corrupting memory and causing the application to crash. Red Hat severity: Low — CVSS 3.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: imagemagick.
Low [CVE-2026-119123] Denial of Service via stack overflow in TIFF decoder
A flaw was found in ImageMagick. This vulnerability allows an attacker to cause a Denial of Service (DoS) by submitting a specially crafted image file for processing. When the Digital Negative (DNG) decoder is disabled, processing the file triggers a stack overflow in the TIFF decoder, leading to an application crash. Red Hat severity: Low — CVSS 3.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: imagemagick.
High [CVE-2026-118669] privilege escalation via client identity confusion in token grant handlers
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while retaining an attacker-supplied request.client_id for validate_grant_type and validate_scopes. A lower-privilege authenticated client can therefore cause grant and scope authorization to use another client's identity when an application validator relies on the documented client_id argument, potentially issuing tokens with unauthorized grants or scopes. Validators that authorize exclusively from request.client may not be affected. This issue is fixed in version 4.0.0. A flaw was found in oauthlib. In certain token grant flows, the authorization system can authenticate an incoming client while retaining a different, client-supplied identifier for permission and scope validation. A remote, authenticated attacker with lower privileges can exploit this inconsistency by submitting another client's identifier during token requests. This flaw leads to privilege escalation, potentially allowing the attacker to obtain access tokens with unauthorized permissions and scopes associated with another client. Red Hat severity: Important — CVSS 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Weakness: CWE-807.
High [CVE-2026-116273] Denial of Service via memory exhaustion from excessive message parts
MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The max_parts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has. Version 5.521 sets max_parts to 1000 and max_depth to 64 by default. Setting either to -1 still removes the limit. A flaw was found in perl-mime-tools. The parser does not enforce a default limit on the number of parts processed in a MIME (Multipurpose Internet Mail Extensions) message. A remote attacker could exploit this vulnerability by submitting a crafted message containing an excessive number of parts, leading to memory exhaustion and a Denial of Service (DoS). Red Hat severity: Important — CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-770. Affected Red Hat products: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: perl-mime-tools.
High [CVE-2026-116270] Denial of Service via memory exhaustion from crafted MIME headers
MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords. For each "=?" that does not start a complete encoded word, decode_mimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs (16,000 bytes) adds 8,000 copies of itself to $@, about 128 MB. From version 5.518, MIME::Parser decodes every multipart boundary this way, so a remote sender can exhaust the memory of the parsing process with one Content-Type header. A flaw was found in perl-MIME-tools. The message header decoding routine improperly accumulates error messages when processing repeated malformed encoded word sequences. A remote attacker can exploit this vulnerability by submitting a specially crafted message header, causing excessive memory consumption and resulting in a Denial of Service (DoS). Red Hat severity: Important — CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-770. Affected Red Hat products: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: perl-mime-tools.