Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
1635 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 619 high, 814 medium, 169 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-94486] Information disclosure via unrestricted cross-site requests
Information disclosure via unrestricted cross-site requests. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-346. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer; Red Hat package: firefox; Red Hat package: thunderbird.
Medium [CVE-2026-49919] Integer overflow in FreeType tt_face_colr_blend_layer leads to heap buffer overflow during COLR font rendering
Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font rendering. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-190. Affected products named by the advisory: Red Hat build of OpenJDK 11 ELS; Red Hat build of OpenJDK 17; Red Hat build of OpenJDK 21; Red Hat build of OpenJDK 25; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 11 more.
Medium [CVE-2026-104721] Arbitrary file write via path traversal in MDC discriminator
Arbitrary file write via path traversal in MDC discriminator. Red Hat rates this moderate (CVSS 5.6). Weakness: CWE-22. Affected products named by the advisory: Migration Toolkit for Applications 8; OpenShift Serverless; Red Hat build of Apache Camel - HawtIO 4; Red Hat Ceph Storage 9; and 11 more. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 7 more.
Medium [CVE-2026-97876] Secure Boot lockdown bypass via improper serial address validation
Secure Boot lockdown bypass via improper serial address validation. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-822. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: grub2.
Medium [CVE-2026-103263] Information disclosure via symlink path traversal in StaticFileHandler
Information disclosure via symlink path traversal in StaticFileHandler. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-59. Affected products named by the advisory: Lightspeed Core; Migration Toolkit for Applications 8; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 10 more. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; and 6 more.
Medium [CVE-2026-103261] Denial of Service (DoS) via unbounded query string parsing
Denial of Service (DoS) via unbounded query string parsing. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Lightspeed Core; Migration Toolkit for Applications 8; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 10 more. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; and 6 more.
Medium [CVE-2026-103641] out-of-bounds read in the Radiance HDR uncompressed scanline decoder
out-of-bounds read in the Radiance HDR uncompressed scanline decoder. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: gegl04-tools; Red Hat package: gegl04.src; Red Hat package: gegl-devel; and 2 more.
Medium [CVE-2026-103531] Arbitrary code execution via stack-based buffer overflow in card-setcos
Arbitrary code execution via stack-based buffer overflow in card-setcos. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: opensc.
Medium [CVE-2026-103399] HTTP/1 request smuggling via undrained Expect: 100-continue body
HTTP/1 request smuggling via undrained Expect: 100-continue body. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-444. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libsoup3-devel; Red Hat package: libsoup3-doc; Red Hat package: libsoup3.src; and 2 more.
Medium [CVE-2026-47562] Denial of Service via kernel log injection
Denial of Service via kernel log injection. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-117. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47531] Denial of Service via null pointer dereference in kernel mode layer
Denial of Service via null pointer dereference in kernel mode layer. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47526] Denial of Service via null pointer dereference in firmware
Denial of Service via null pointer dereference in firmware. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47604] Information disclosure via missing authorization checks
Information disclosure via missing authorization checks. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-283. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47603] Information disclosure via missing authorization in kernel mode driver
Information disclosure via missing authorization in kernel mode driver. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-283. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47584] Denial of Service via NULL pointer dereference in kernel module
Denial of Service via NULL pointer dereference in kernel module. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47568] Denial of Service via uncontrolled kernel logging
Denial of Service via uncontrolled kernel logging. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47567] Denial of Service via DRM VMA address space exhaustion
Denial of Service via DRM VMA address space exhaustion. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47566] Denial of Service via kernel memory leak
Denial of Service via kernel memory leak. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47557] Denial of Service via NULL pointer dereference in kernel mode layer
Denial of Service via NULL pointer dereference in kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47555] Information disclosure via uninitialized kernel memory copy
Information disclosure via uninitialized kernel memory copy. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.