Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
1635 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 619 high, 814 medium, 169 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Low [CVE-2026-96546] one-byte out-of-bounds heap read in the uncompressed DDS loader
one-byte out-of-bounds heap read in the uncompressed DDS loader. Red Hat rates this low (CVSS 2.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: gimp.
Low [CVE-2026-91142] Integer overflow in `do_lastlog ` offset calculation can misaddress `lastlog` entries on ILP32 builds
Integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ILP32 builds. Red Hat rates this low (CVSS 3.6). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit.
Low [CVE-2026-93601] Name Constraint Bypass in wildcard certificate validation
Name Constraint Bypass in wildcard certificate validation. Red Hat rates this low (CVSS 2.2). Weakness: CWE-1289. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Confidential Cluster Operator; Confidential Compute Attestation; Logging Subsystem for Red Hat OpenShift; and 32 more. Affected products named by the advisory: Migration Toolkit for Applications 8; OpenShift Lightspeed; OpenShift Service Mesh 3; Pen Drive Powered by Red Hat Lightspeed; and 28 more.
Low [CVE-2026-93600] URI Name Constraint Bypass via X.509 Certificate Misissue
URI Name Constraint Bypass via X.509 Certificate Misissue. Red Hat rates this low (CVSS 2.2). Weakness: CWE-295. Affected products named by the advisory: Confidential Cluster Operator; Confidential Compute Attestation; Logging Subsystem for Red Hat OpenShift; Migration Toolkit for Applications 8; and 16 more. Affected products named by the advisory: OpenShift Lightspeed; OpenShift Service Mesh 3; Pen Drive Powered by Red Hat Lightspeed; Red Hat Ansible Automation Platform 2; and 12 more.
Low [CVE-2026-93590] Denial of Service via UHDR encoder policy bypass
Denial of Service via UHDR encoder policy bypass. Red Hat rates this low (CVSS 3.7). Weakness: CWE-131. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-93588] Denial of Service via Null Pointer Dereference in PNM Coder
Denial of Service via Null Pointer Dereference in PNM Coder. Red Hat rates this low (CVSS 3.1). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-93586] Denial of Service via Use After Free in ImagesToBlob
Denial of Service via Use After Free in ImagesToBlob. Red Hat rates this low (CVSS 2.9). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-93587] Local user can cause denial of service via policy bypass in image decoders
Local user can cause denial of service via policy bypass in image decoders. Red Hat rates this low (CVSS 3.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-77860] Denial of Service via 'serve-expired' code path bypass
Denial of Service via 'serve-expired' code path bypass. Red Hat rates this low (CVSS 3.7). Weakness: CWE-675. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: unbound.
Low [CVE-2026-91957] Use-after-free vulnerability in smartcard RDPDR device handler leading to denial of service or potential code execution
Use-after-free vulnerability in smartcard RDPDR device handler leading to denial of service or potential code execution. Red Hat rates this low (CVSS 3.1). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Low [CVE-2026-91926] memory leak in ntlm_decode_target_info via duplicated AV_PAIR entries in NTLM CHALLENGE
memory leak in ntlm_decode_target_info via duplicated AV_PAIR entries in NTLM CHALLENGE. Red Hat rates this low (CVSS 3.7). Weakness: CWE-401. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat package: gssntlmssp.
Low [CVE-2026-89162] Information disclosure via pcre2_serialize_encode
Information disclosure via pcre2_serialize_encode. Red Hat rates this low (CVSS 2.9). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 2 more. Affected products named by the advisory: Red Hat package: mariadb10.11; Red Hat package: mariadb11.8.
Low [CVE-2026-89156] Out-of-bounds read via invalid UTF data during JIT fallback
Out-of-bounds read via invalid UTF data during JIT fallback. Red Hat rates this low (CVSS 2.9). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 7 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: bootc; Red Hat package: mariadb10.11; and 3 more.
Low [CVE-2026-86564] Missing length validation before reading command_data in virtio-net control queue handler
Missing length validation before reading command_data in virtio-net control queue handler. Red Hat rates this low (CVSS 3.3). Weakness: CWE-125. Affected products named by the advisory: Fast Datapath for RHEL 10; Fast Datapath for RHEL 8; Fast Datapath for RHEL 9; Red Hat Enterprise Linux 10; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: dpdk.
Low [CVE-2026-86425] Denial of Service due to heap-use-after-free vulnerability
Denial of Service due to heap-use-after-free vulnerability. Red Hat rates this low (CVSS 3.3). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-86424] Local attacker can modify files via TOCTOU symlink race
Local attacker can modify files via TOCTOU symlink race. Red Hat rates this low (CVSS 2.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-86423] Denial of service via heap-use-after-free in PerlMagick's GetList method
Denial of service via heap-use-after-free in PerlMagick's GetList method. Red Hat rates this low (CVSS 3.3). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-86421] Denial of Service via memory leak in MSL decoder
Denial of Service via memory leak in MSL decoder. Red Hat rates this low (CVSS 3.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-86420] Denial of Service due to memory budget exhaustion
Denial of Service due to memory budget exhaustion. Red Hat rates this low (CVSS 3.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-82209] Information disclosure via improper Public Suffix List boundary check
Information disclosure via improper Public Suffix List boundary check. Red Hat rates this low (CVSS 3.1). Weakness: CWE-501. Red Hat lists fixing advisory RHSA-2026:63161 with package curl-main-8.22.0-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 3 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat OpenShift Dev Spaces; Red Hat package: curl.