Red Hat Linux Red Hat Enterprise Linux Vulnerabilities & Security Advisories
1158 advisories tracked · Red Hat Security Data API · 3 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Red Hat Enterprise Linux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 770 high, 341 medium, 16 low.
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux Red Hat Enterprise Linux advisories
High [CVE-2026-47783] Username enumeration via timing side channel
Username enumeration via timing side channel. Red Hat rates this important (CVSS 8.1). Weakness: CWE-208. Affected package(s): memcached. Resolved in Red Hat advisory RHSA-2026:27862 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more.
High [CVE-2026-43618] Remote memory disclosure via integer overflow in compressed-token decoding
Remote memory disclosure via integer overflow in compressed-token decoding. Red Hat rates this important (CVSS 8.1). Weakness: CWE-190. Affected package(s): rsync, discovery/discovery-ui-rhel9:1782166952. Resolved in Red Hat advisory RHSA-2026:26410 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 9); Red Hat Enterprise Linux BaseOS (v. 10); Red Hat Enterprise Linux BaseOS (v. 8); and 8 more.
High [CVE-2026-29518] TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot.
TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot.. Red Hat rates this important (CVSS 7.8). Weakness: CWE-367. Affected package(s): rsync, discovery/discovery-ui-rhel9:1782166952. Resolved in Red Hat advisory RHSA-2026:26410 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 9); Red Hat Enterprise Linux BaseOS (v. 10); Red Hat Enterprise Linux BaseOS (v. 8); and 8 more.
High [CVE-2026-42959] Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages
Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages. Red Hat rates this important (CVSS 7.5). Weakness: CWE-824. Affected package(s): unbound-main, unbound. Resolved in Red Hat advisory RHSA-2026:23231 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 2 more.
Medium [CVE-2026-9150] Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums
Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-121. Affected package(s): libsolv, libsolv-main. Resolved in Red Hat advisory RHSA-2026:28236 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Hardened Images; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; and 3 more.
Medium [CVE-2026-9149] Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted.solv file. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-122. Affected package(s): libsolv, libsolv-main. Resolved in Red Hat advisory RHSA-2026:28236 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Hardened Images; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more.
High [CVE-2026-8975] Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151
Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151. Red Hat rates this important (CVSS 7.5). Weakness: CWE-787. Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:26551 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 7 more.
High [CVE-2026-8947] Use-after-free in the DOM: Bindings (WebIDL) component
Use-after-free in the DOM: Bindings (WebIDL) component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-825. Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:26551 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 7 more.
High [CVE-2026-8946] Incorrect boundary conditions in the Audio/Video: Web Codecs component
Incorrect boundary conditions in the Audio/Video: Web Codecs component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-787. Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:26551 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 7 more.
High [CVE-2026-46323] Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs
Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs. Red Hat rates this important (CVSS 7.8). Weakness: CWE-123. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:27708 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux for NVIDIA 26; and 4 more.
Medium [CVE-2026-46331] extend the writable skb range per key
extend the writable skb range per key. Red Hat rates this important (CVSS 6.7). Weakness: CWE-787. Affected package(s): kernel, rhcos, kernel-rt, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:27354 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 18 more.
High [CVE-2026-45736] Uninitialized memory disclosure via `websocket.close()` with `TypedArray`
Uninitialized memory disclosure via `websocket.close()` with `TypedArray`. Red Hat rates this important (CVSS 7.5). Weakness: CWE-824. Affected package(s): dotnet8, ansible-automation-platform, rhdh/rhdh-hub-rhel9:1782761244, dotnet10, discovery/discovery-ui-rhel9:1782166952, dotnet9. Resolved in Red Hat advisory RHSA-2026:34374 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6; Red Hat Developer Hub 1.10; Red Hat Developer Hub 1.9; Red Hat Discovery 2; and 27 more.
High [CVE-2026-46333] Read root-owned files as an unprivileged user
Read root-owned files as an unprivileged user. Red Hat rates this important (CVSS 7.8). Weakness: CWE-269. Affected package(s): kernel, rhcos, kernel-rt, openshift, kpatch-patch, cri-o. Resolved in Red Hat advisory RHSA-2026:23470 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat OpenShift Container Platform 4.20; Red Hat Enterprise Linux AppStream EUS (v. 10.0); Red Hat Enterprise Linux AppStream (v. 10); and 55 more.
High [CVE-2025-54518] Privilege escalation via improper CPU cache isolation
Privilege escalation via improper CPU cache isolation. Red Hat rates this important (CVSS 7). Weakness: CWE-1220. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more.
High [CVE-2026-44673] Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob
Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob. Red Hat rates this important (CVSS 7.5). Weakness: CWE-190. Affected package(s): libyang. Resolved in Red Hat advisory RHSA-2026:24758 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-44513] Arbitrary remote code execution via `trust_remote_code` bypass
Arbitrary remote code execution via `trust_remote_code` bypass. Red Hat rates this important (CVSS 8.8). Weakness: CWE-358. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
High [CVE-2026-6478] Credential recovery via covert timing channel in MD5 password comparison
Credential recovery via covert timing channel in MD5 password comparison. Red Hat rates this important (CVSS 8.2). Weakness: CWE-385. Affected package(s): postgresql, postgresql:12, postgresql:18, postgresql:15, libpq, postgresql:13. Resolved in Red Hat advisory RHSA-2026:26561 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 9 more.
High [CVE-2026-6477] PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory
PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory. Red Hat rates this important (CVSS 8.4). Weakness: CWE-120. Affected package(s): postgresql, postgresql:12, postgresql:18, postgresql:15, libpq, postgresql16. Resolved in Red Hat advisory RHSA-2026:26561 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 9 more.
High [CVE-2026-6473] integer overflow can cause an undersized allocation and an out-of-bounds write
integer overflow can cause an undersized allocation and an out-of-bounds write. Red Hat rates this important (CVSS 8.8). Weakness: CWE-190. Affected package(s): postgresql, postgresql:12, postgresql:18, postgresql:15, libpq, postgresql16. Resolved in Red Hat advisory RHSA-2026:26561 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 10 more.
High [CVE-2026-42561] Denial of Service via excessive multipart part headers
Denial of Service via excessive multipart part headers. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: python-multipart; Red Hat OpenShift AI 3.3; Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; and 5 more.