Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2549 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 51 critical, 903 high, 1328 medium, 265 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
High [CVE-2026-111379] Arbitrary code execution via crafted persistent cache file
Arbitrary code execution via crafted persistent cache file. Red Hat rates this important (CVSS 7.3). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
High [CVE-2026-111378] Denial of Service via memory exhaustion in NLA frame parser
Denial of Service via memory exhaustion in NLA frame parser. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-89088] Parted: parted: denial of service via heap buffer overflow during fat16 resize
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS). This vulnerability is rated as Moderate severity rather than Important because exploitation requires local user interaction with a specifically crafted FAT16 storage device or image, limiting the blast radius to a denial of service. Under default Red Hat Enterprise Linux configurations, partition resizing operations using parted or libparted are interactive administrative tasks that are not routinely invoked automatically on untrusted media. Consequently, an attacker cannot remotely compromise the system or escalate privileges, as the defect only triggers an immediate application termination during targeted filesystem adjustments. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-89085] Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption. This vulnerability is rated as Moderate impact because exploitation requires a local user or automated process to inspect or resize an untrusted, specially crafted FAT32 filesystem using parted. In typical Red Hat Enterprise Linux deployments, parted is executed manually by administrative users rather than operating as an unprivileged or network-exposed daemon. Consequently, the flaw cannot be triggered without direct user interaction or file processing, and any resulting heap corruption remains confined to the executing process, primarily causing a denial of service. Red Hat severity: Moderate — CVSS 6.6 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-110759] Text::CSV_XS: Data corruption via trailing carriage return in empty fields
Text::CSV_XS: Data corruption via trailing carriage return in empty fields. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1286. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-110758] Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping
Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-124. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-110757] Text::CSV_XS: CSV record splitting via unquoted numeric fields
Text::CSV_XS: CSV record splitting via unquoted numeric fields. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-93. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-110756] Text::CSV_XS: Data corruption via invalid UTF-8 byte sequences
Text::CSV_XS: Data corruption via invalid UTF-8 byte sequences. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-135. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-110755] Text::CSV_XS: Denial of Service via crafted carriage return line endings
Text::CSV_XS: Denial of Service via crafted carriage return line endings. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-110754] Denial of Service via memory leak during malformed CSV parsing
Denial of Service via memory leak during malformed CSV parsing. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-110753] Denial of Service via use-after-free when parsing empty rows
Denial of Service via use-after-free when parsing empty rows. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat package: perl-text-csv_xs.
Medium [CVE-2026-62438] Gimp: gimp: paa integer overflow out-of-bounds read
A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when calculating image dimensions during file decompression, the application allocates an undersized memory buffer. Subsequent processing reads memory past the buffer boundary, terminating the plug-in process unexpectedly. This vulnerability is rated as Low impact because exploitation requires a local user to process a maliciously crafted texture file, limiting the blast radius primarily to a crash of an isolated plug-in process. GIMP is an optional graphical application that is not installed or running by default in standard Red Hat Enterprise Linux server environments. Furthermore, exposure is confined to loading an uncommon Bohemia Interactive image format, preventing broader host compromise beyond terminating the load procedure or potential minor heap disclosure within the helper process. Red Hat severity: Low — CVSS 6.1 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H). Weakness: CWE-190. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6.
Medium [CVE-2026-85985] Unauthorized file access via CONNECT engine functions
Unauthorized file access via CONNECT engine functions. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-552. Red Hat lists fixing advisory RHSA-2026:84689 with package mariadb11-8-main-11.8.9-0.1.hum1, mariadb10-11-main-10.11.18-4.1.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenStack Platform 13 (Queens); Red Hat package: mariadb10.11; Red Hat package: mariadb11.8.
Medium [CVE-2026-111377] Denial of Service via unbounded static channel reassembly
Denial of Service via unbounded static channel reassembly. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-111376] Denial of Service via short clipboard response
Denial of Service via short clipboard response. Red Hat rates this moderate (CVSS 5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-111375] Denial of Service via out-of-bounds read in RAIL window title
Denial of Service via out-of-bounds read in RAIL window title. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-111374] Denial of Service via unadvertised camera stream requests
Denial of Service via unadvertised camera stream requests. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-111373] Denial of Service via zero-length WebSocket ping
Denial of Service via zero-length WebSocket ping. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-46471] information disclosure via out-of-bounds read during MP4 parsing
information disclosure via out-of-bounds read during MP4 parsing. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: gstreamer1-plugins-good.
Low [CVE-2026-17591] Libarchive: libarchive: use-after-free via aliased mac metadata copy
A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data. This vulnerability is rated as Low severity for Red Hat because successful exploitation requires highly specific application-level API usage where an archive entry's metadata buffer is explicitly copied onto itself. Standard command-line archive utilities and typical library consumers do not perform this aliased operation during regular archive extraction or creation. Consequently, the flaw presents minimal exposure in standard Red Hat Enterprise Linux environments, with potential impact limited to localized crashes or minor memory leakage in custom applications invoking the affected API pattern. Weakness: CWE-416. Affected Red Hat products: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat fixing advisory: RHSA-2026:77775.