Red Hat Linux Red Hat Enterprise Linux Vulnerabilities & Security Advisories
1158 advisories tracked · Red Hat Security Data API · 3 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Red Hat Enterprise Linux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 770 high, 341 medium, 16 low.
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux Red Hat Enterprise Linux advisories
High [CVE-2026-42587] Denial of Service via unbounded memory allocation in HTTP content decompression
Denial of Service via unbounded memory allocation in HTTP content decompression. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, netty-codec-http, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 18 more.
High [CVE-2026-42584] Incorrect HTTP response parsing leads to data confusion
Incorrect HTTP response parsing leads to data confusion. Red Hat rates this important (CVSS 7.3). Weakness: CWE-444. Affected package(s): devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, netty-codec-http, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 19 more.
High [CVE-2026-42579] High integrity impact due to improper DNS domain name constraint enforcement
High integrity impact due to improper DNS domain name constraint enforcement. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1286. Affected package(s): netty-codec-dns, devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 1 more.
High [CVE-2026-42578] HTTP Header Injection via HttpProxyHandler Disabled Validation
HTTP Header Injection via HttpProxyHandler Disabled Validation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-93. Affected package(s): netty-handler-proxy, devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 18 more.
High [CVE-2026-42581] HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers
HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers. Red Hat rates this important (CVSS 7.2). Weakness: CWE-444. Affected package(s): devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, netty-codec-http, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 2 more.
High [CVE-2026-45109] Information disclosure via security fix bypass in middleware with Turbopack
Information disclosure via security fix bypass in middleware with Turbopack. Red Hat rates this important (CVSS 7.5). Weakness: CWE-358. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-44579] Denial of Service via crafted POST requests to server actions
Denial of Service via crafted POST requests to server actions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-833. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-44578] Server-Side Request Forgery via crafted WebSocket upgrade requests
Server-Side Request Forgery via crafted WebSocket upgrade requests. Red Hat rates this important (CVSS 8.6). Weakness: CWE-918. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-44577] Denial of Service via Image Optimization API
Denial of Service via Image Optimization API. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-44574] Authorization bypass via crafted query parameters
Authorization bypass via crafted query parameters. Red Hat rates this important (CVSS 8.1). Weakness: CWE-551. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44575] Unauthorized access to protected content via middleware bypass
Unauthorized access to protected content via middleware bypass. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44573] Information disclosure due to middleware bypass in Pages Router with i18n
Information disclosure due to middleware bypass in Pages Router with i18n. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44432] Denial of Service due to excessive HTTP response decompression
Denial of Service due to excessive HTTP response decompression. Red Hat rates this important (CVSS 7.5). Weakness: CWE-409. Affected package(s): rhaiis/model-opt-cuda-rhel9:1782352950, rhaiis/vllm-spyre-rhel9:1782352919, satellite/iop-yuptoo-rhel9:1782380482, satellite/iop-insights-engine-rhel9:1782448455, quay/quay-rhel8:1781878070, satellite/iop-puptoo-rhel9:1779792651. Resolved in Red Hat advisory RHSA-2026:24483 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 24 more.
High [CVE-2026-44293] Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors
Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors. Red Hat rates this important (CVSS 7.1). Weakness: CWE-94. Affected package(s): automation-platform-ui, rhdh/rhdh-hub-rhel9:1781187342, openshift-service-mesh/kiali-ossmc-rhel9:1780997382, ansible-automation-platform, openshift4/ose-console-rhel9:1782224390, openshift-service-mesh/kiali-rhel9:1780997438. Resolved in Red Hat advisory RHSA-2026:34160 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Enterprise Linux Extensions Channel (v. 10); Red Hat Developer Hub 1.9; Red Hat OpenShift Container Platform 4.21; and 9 more.
High [CVE-2026-44289] Denial of Service via uncontrolled recursion in protobuf decoding
Denial of Service via uncontrolled recursion in protobuf decoding. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: OpenShift Pipelines; Red Hat Build of Podman Desktop; Red Hat Ceph Storage 9; Red Hat Enterprise Linux 8; and 4 more.
High [CVE-2026-42945] Arbitrary Code Execution Vulnerability
Arbitrary Code Execution Vulnerability. Red Hat rates this critical (CVSS 8.1). Weakness: CWE-131. Affected package(s): odf4/ocs-client-console-rhel9:1779881302, satellite/iop-gateway-rhel9:1779706797, nginx, odf4/ocs-client-console-rhel9:1779879463, odf4/ocs-client-console-rhel9:1779972138, odf4/odf-console-rhel9:1779952279. Resolved in Red Hat advisory RHSA-2026:19371 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NGINX Plus; NGINX Open Source; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8; and 17 more.
High [CVE-2026-46300] "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
"Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel. Red Hat rates this important (CVSS 7.8). Weakness: CWE-123. Affected package(s): rhcos, kernel-rt, kernel, openshift, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:23470 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat OpenShift Container Platform 4.21; Red Hat OpenShift Container Platform 4.12; Red Hat OpenShift Container Platform 4.13; and 64 more.
High [CVE-2026-42338] Cross-site scripting via improper HTML escaping of untrusted input
Cross-site scripting via improper HTML escaping of untrusted input. Red Hat rates this important (CVSS 8.1). Weakness: CWE-79. Affected package(s): openshift-service-mesh/kiali-ossmc-rhel9:1782201851, openshift-service-mesh/kiali-ossmc-rhel9:1782231869, nodejs24, nodejs22, openshift-service-mesh/kiali-ossmc-rhel9:1782201894, openshift-service-mesh/kiali-ossmc-rhel9:1782201696. Resolved in Red Hat advisory RHSA-2026:33160 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9; Red Hat Ansible Automation Platform 2.6; Red Hat Developer Hub 1.10; and 22 more.
High [CVE-2026-42899] .NET: infinite loop allows an attacker to cause a denial of service
.NET: infinite loop allows an attacker to cause a denial of service. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Affected package(s): dotnet10.0, dotnet9.0, dotnet8.0, dotnet8, dotnet9, dotnet10. Resolved in Red Hat advisory RHSA-2026:21291 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; and 1 more.
High [CVE-2026-8401] Sandbox escape in the Profile Backup component
Sandbox escape in the Profile Backup component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-653. Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:26551 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 7 more.