Red Hat Linux Red Hat Enterprise Linux Vulnerabilities & Security Advisories
1165 advisories tracked · Red Hat Security Data API · 3 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Red Hat Enterprise Linux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 771 high, 347 medium, 16 low.
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux Red Hat Enterprise Linux advisories
High [CVE-2026-54229] ChownProblemDir succeeds during active post-create event processing due to inadequate locking
ChownProblemDir succeeds during active post-create event processing due to inadequate locking. Red Hat rates this important (CVSS 7). Weakness: CWE-362. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; and 3 more.
High [CVE-2026-54230] event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites. Red Hat rates this important (CVSS 7). Weakness: CWE-59. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8.
Critical [CVE-2026-7598] integer overflow via large username or password arguments
integer overflow via large username or password arguments. Red Hat rates this important (CVSS 9.1). Weakness: CWE-190. Affected package(s): libssh2-main, rust-main. Resolved in Red Hat advisory RHSA-2026:7021 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Trusted Profile Analyzer.
High [CVE-2026-37457] denial of service via crafted FlowSpec component
denial of service via crafted FlowSpec component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-787. Affected package(s): frr, frr10. Resolved in Red Hat advisory RHSA-2026:24340 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-43037] clear skb2->cb[] in ip4ip6_err()
clear skb2->cb[] in ip4ip6_err(). Red Hat rates this critical (CVSS 8.8). Weakness: CWE-843. Affected package(s): kernel, rhcos, kernel-rt, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:28741 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Enterprise Linux 7 Extended Lifecycle Support; and 19 more.
High [CVE-2026-43038] clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
clear skb2->cb[] in ip6_err_gen_icmpv6_unreach(). Red Hat rates this important (CVSS 7.3). Weakness: CWE-843. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:25120 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux AppStream EUS (v. 10.0); Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream E4S (v.9.2); Red Hat Enterprise Linux AppStream E4S (v.9.4); and 44 more.
High [CVE-2026-31709] validate the whole DACL before rewriting it in cifsacl
validate the whole DACL before rewriting it in cifsacl. Red Hat rates this important (CVSS 7.8). Weakness: CWE-1288. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:21745 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; and 1 more.
High [CVE-2026-5403] Heap-based Buffer Overflow in Wireshark
Heap-based Buffer Overflow in Wireshark. Red Hat rates this important (CVSS 7.8). Weakness: CWE-122. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux 10.
High [CVE-2026-5656] Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark. Red Hat rates this important (CVSS 7.8). Weakness: CWE-22. Affected package(s): wireshark. Resolved in Red Hat advisory RHSA-2026:20600 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support.
High [CVE-2026-5405] Heap-based Buffer Overflow in Wireshark
Heap-based Buffer Overflow in Wireshark. Red Hat rates this important (CVSS 7.8). Weakness: CWE-122. Affected package(s): wireshark. Resolved in Red Hat advisory RHSA-2026:20600 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support.
High [CVE-2026-33845] Denial of Service via DTLS zero-length fragment
Denial of Service via DTLS zero-length fragment. Red Hat rates this important (CVSS 7.5). Weakness: CWE-191. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:29197 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 37 more.
High [CVE-2026-7246] Arbitrary command execution via command injection in click.edit()
Arbitrary command execution via command injection in click.edit(). Red Hat rates this important (CVSS 7.2). Weakness: CWE-78. Affected package(s): python3.12-click, python-click. Resolved in Red Hat advisory RHSA-2026:24761 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 10; Red Hat Ansible Automation Platform 2.6 for RHEL 9.
High [CVE-2025-14576] Arbitrary QML/JavaScript code injection via malicious SVG file
Arbitrary QML/JavaScript code injection via malicious SVG file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-94. Affected package(s): qt6-main, qt6-qtdeclarative, qt5-main. Resolved in Red Hat advisory RHSA-2026:20567 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Hardened Images.
Medium [CVE-2026-3833] Policy bypass due to case-sensitive nameConstraints comparison
Policy bypass due to case-sensitive nameConstraints comparison. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-178. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:20613 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 12 more.
High [CVE-2026-42198] Client-side Denial of Service via malicious SCRAM-SHA-256 authentication
Client-side Denial of Service via malicious SCRAM-SHA-256 authentication. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): postgresql-jdbc, pgjdbc. Resolved in Red Hat advisory RHSA-2026:25030 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat AMQ Broker 7; and 2 more.
High [CVE-2026-37555] integer overflow in ima_reader_init()
integer overflow in ima_reader_init(). Red Hat rates this important (CVSS 8.2). Weakness: CWE-190. Affected package(s): rhaiis/model-opt-cuda-rhel9:1782352950, rhaiis/vllm-spyre-rhel9:1782352919, libsndfile, rhaiis/vllm-rocm-rhel9:1782353093, rhaiis/vllm-cuda-rhel9:1782352847. Resolved in Red Hat advisory RHSA-2026:25197 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 7 more.
High [CVE-2026-42011] Security bypass due to incorrect name constraint handling
Security bypass due to incorrect name constraint handling. Red Hat rates this moderate (CVSS 7.4). Weakness: CWE-295. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:20613 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 12 more.
High [CVE-2026-42012] Certificate validation bypass due to improper handling of URI and SRV SANs
Certificate validation bypass due to improper handling of URI and SRV SANs. Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-295. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:20613 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 12 more.
High [CVE-2026-42013] Certificate validation bypass due to oversized Subject Alternative Name
Certificate validation bypass due to oversized Subject Alternative Name. Red Hat rates this moderate (CVSS 8.2). Weakness: CWE-295. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:20613 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 11 more.
High [CVE-2026-42009] Denial of Service via DTLS packet reordering vulnerability
Denial of Service via DTLS packet reordering vulnerability. Red Hat rates this important (CVSS 7.5). Weakness: CWE-475. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:29794 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 40 more.