Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
1635 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 619 high, 814 medium, 169 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-47534] Denial of Service via divide-by-zero in kernel mode layer
Denial of Service via divide-by-zero in kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47517] Denial of Service via crafted ioctl request
Denial of Service via crafted ioctl request. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47518] Code execution via improper permission assignment in secure microcontroller
Code execution via improper permission assignment in secure microcontroller. Red Hat rates this moderate (CVSS 6). Weakness: CWE-266. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47586] arbitrary code execution via kernel module use-after-free
arbitrary code execution via kernel module use-after-free. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47565] arbitrary code execution via kernel mode race condition
arbitrary code execution via kernel mode race condition. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47537] arbitrary code execution via out-of-bounds write in kernel mode layer
arbitrary code execution via out-of-bounds write in kernel mode layer. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47533] arbitrary code execution via kernel-mode array indexing flaw
arbitrary code execution via kernel-mode array indexing flaw. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47527] Arbitrary code execution via firmware out-of-bounds read
Arbitrary code execution via firmware out-of-bounds read. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47525] Arbitrary code execution via improper array index validation
Arbitrary code execution via improper array index validation. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47524] Arbitrary code execution via out-of-bounds read
Arbitrary code execution via out-of-bounds read. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47515] Arbitrary code execution via kernel-mode unbounded string operation
Arbitrary code execution via kernel-mode unbounded string operation. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-13719] Information disclosure via alert rules list API
Information disclosure via alert rules list API. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-863. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 4 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: grafana.
Medium [CVE-2026-13720] Dashboard modification lockout via forged file-provisioning metadata
Dashboard modification lockout via forged file-provisioning metadata. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 4 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: grafana.
Medium [CVE-2026-81842] Authorization bypass via missing destination folder permission check
Authorization bypass via missing destination folder permission check. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana13-2-main-13.2.1-0.8.hum1, grafana13-1-main-13.1.6-0.5.hum1, grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 6 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more.
Medium [CVE-2026-12345] Arbitrary file deletion via race condition during temporary directory cleanup
Arbitrary file deletion via race condition during temporary directory cleanup. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:74870 with package python3-14-main-3.14.8-1.hum1, python3-12-main-3.12.15-1.hum1, python3-13-main-3.13.16-1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 8 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Hardened Images; Red Hat OpenShift Virtualization 4; and 4 more.
Medium [CVE-2026-102633] Denial of Service via integer overflow in expat_realloc
Denial of Service via integer overflow in expat_realloc. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 9 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: expat; and 5 more.
Medium [CVE-2026-84783] Denial of Service via race condition in certificate extension caching
Denial of Service via race condition in certificate extension caching. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:59641 with package openssl3-main-3.5.8-1.hum1, openssl-main-3.5.8-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-77696] Private key recovery via SM2 timing side-channel
Private key recovery via SM2 timing side-channel. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-208. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-75806] Denial of Service via undersized DTLS record
Denial of Service via undersized DTLS record. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1284. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-75805] Denial of Service via crafted CMP certificate revocation response
Denial of Service via crafted CMP certificate revocation response. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-476. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.