Red Hat Linux Red Hat Enterprise Linux Vulnerabilities & Security Advisories
1314 advisories tracked · Red Hat Security Data API · 3 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as Red Hat Enterprise Linux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 31 critical, 825 high, 437 medium, 17 low.
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux Red Hat Enterprise Linux advisories
High [CVE-2026-25965] Local File Disclosure via Path Traversal
Local File Disclosure via Path Traversal. Red Hat rates this important (CVSS 8.6). Weakness: CWE-22. Affected package(s): ImageMagick. Resolved in Red Hat advisory RHSA-2026:5573 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Enterprise Linux 7 Extended Lifecycle Support.
High [CVE-2026-21863] Denial of Service via invalid clusterbus packet
Denial of Service via invalid clusterbus packet. Red Hat rates this important (CVSS 7.5). Weakness: CWE-125. Affected package(s): valkey, valkey-main. Resolved in Red Hat advisory RHSA-2026:3507 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9; Red Hat Hardened Images.
High [CVE-2025-67733] Data tampering and denial of service via improper null character handling in Lua scripts
Data tampering and denial of service via improper null character handling in Lua scripts. Red Hat rates this important (CVSS 7.1). Weakness: CWE-170. Affected package(s): valkey. Resolved in Red Hat advisory RHSA-2026:3507 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.
High [CVE-2026-2048] Remote Code Execution via XWD file parsing vulnerability
Remote Code Execution via XWD file parsing vulnerability. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787. Affected package(s): gimp, gimp:2.8. Resolved in Red Hat advisory RHSA-2026:5391 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 8 more.
High [CVE-2026-2047] Remote code execution via heap-based buffer overflow in ICNS file parsing
Remote code execution via heap-based buffer overflow in ICNS file parsing. Red Hat rates this important (CVSS 7.8). Weakness: CWE-131. Affected package(s): gimp. Resolved in Red Hat advisory RHSA-2026:4173 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-2045] Remote Code Execution via out-of-bounds write in XWD file parsing
Remote Code Execution via out-of-bounds write in XWD file parsing. Red Hat rates this important (CVSS 7.3). Weakness: CWE-787. Affected package(s): gimp, gimp:2.8. Resolved in Red Hat advisory RHSA-2026:5391 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 8 more.
High [CVE-2026-2044] Remote Code Execution via uninitialized memory in PGM file parsing
Remote Code Execution via uninitialized memory in PGM file parsing. Red Hat rates this important (CVSS 8.8). Weakness: CWE-908. Affected package(s): gimp, gimp:2.8. Resolved in Red Hat advisory RHSA-2026:5391 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 8 more.
High [CVE-2026-0797] Remote Code Execution via ICO File Parsing Vulnerability
Remote Code Execution via ICO File Parsing Vulnerability. Red Hat rates this important (CVSS 8.8). Weakness: CWE-120. Affected package(s): gimp, gimp:2.8. Resolved in Red Hat advisory RHSA-2026:5391 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 8 more.
High [CVE-2026-26200] Denial of Service due to heap buffer overflow when parsing a crafted h5 file
Denial of Service due to heap buffer overflow when parsing a crafted h5 file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-131. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-24734] Certificate revocation bypass due to improper OCSP response validation
Certificate revocation bypass due to improper OCSP response validation. Red Hat rates this important (CVSS 7.4). Weakness: CWE-295. Affected package(s): jws6-tomcat-native, tomcat, tomcat10-main, jws6-tomcat, tomcat11-main. Resolved in Red Hat advisory RHSA-2026:5612 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat JBoss Web Server 6.2 on RHEL 10; Red Hat JBoss Web Server 6.2 on RHEL 8; and 3 more.
High [CVE-2026-2447] Heap buffer overflow in libvpx
Heap buffer overflow in libvpx. Red Hat rates this important (CVSS 7.5). Affected package(s): libvpx, thunderbird, rhaiis/vllm-rocm-rhel9:1775680262, firefox, rhaiis/vllm-cuda-rhel9:1775680192, rhaiis/vllm-spyre-rhel9:1778244546. Resolved in Red Hat advisory RHSA-2026:3967 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; and 11 more.
Medium [CVE-2026-23185] cancel mlo_scan_start_wk
cancel mlo_scan_start_wk. Red Hat rates this important (CVSS 6.7). Weakness: CWE-772. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-23111] Privilege escalation or denial of service in nf_tables via inverted element activity check
Privilege escalation or denial of service in nf_tables via inverted element activity check. Red Hat rates this important (CVSS 7.8). Weakness: CWE-672. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:9112 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux AppStream EUS (v. 10.0); Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream EUS (v.9.4); Red Hat Enterprise Linux AppStream EUS (v.9.6); and 24 more.
High [CVE-2026-2007] PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory
PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory. Red Hat rates this important (CVSS 8.2). Weakness: CWE-120. Affected package(s): postgresql18-main, postgresql18. Resolved in Red Hat advisory RHSA-2026:19009 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat Enterprise Linux 9.
High [CVE-2026-2006] PostgreSQL missing validation of multibyte character length executes arbitrary code
PostgreSQL missing validation of multibyte character length executes arbitrary code. Red Hat rates this important (CVSS 8.8). Weakness: CWE-1285. Affected package(s): postgresql, postgresql:16, postgresql:15, postgresql18-main, rhui5/rhua-rhel9:1773670137, postgresql:13. Resolved in Red Hat advisory RHSA-2026:4516 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 11 more.
High [CVE-2026-2005] PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
PostgreSQL pgcrypto heap buffer overflow executes arbitrary code. Red Hat rates this important (CVSS 8.8). Weakness: CWE-120. Affected package(s): postgresql, postgresql:16, postgresql:15, postgresql18-main, rhui5/rhua-rhel9:1773670137, postgresql:13. Resolved in Red Hat advisory RHSA-2026:4516 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 11 more.
High [CVE-2026-2004] PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code. Red Hat rates this important (CVSS 8.8). Weakness: CWE-1287. Affected package(s): postgresql, postgresql:16, postgresql:15, postgresql18-main, rhui5/rhua-rhel9:1773670137, postgresql:13. Resolved in Red Hat advisory RHSA-2026:4516 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 11 more.
High [CVE-2026-25990] Out-of-bounds Write via Specially Crafted PSD Image
Out-of-bounds Write via Specially Crafted PSD Image. Red Hat rates this important (CVSS 7.3). Weakness: CWE-787. Affected package(s): ansible-automation-platform, quay/quay-rhel9:1775069491, python3.12-pillow, rhaiis/model-opt-cuda-rhel9:1772713830, rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1776336652, rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1776318795. Resolved in Red Hat advisory RHSA-2026:6309 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Satellite 6.16 for RHEL 8; and 15 more.
High [CVE-2025-69873] ReDoS via $data reference
ReDoS via $data reference. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Affected package(s): quay/quay-rhel9:1775069491, rhoai/odh-dashboard-rhel8:1774282136, rhoai/odh-mod-arch-gen-ai-rhel9:1778473763, automation-gateway, rhoai/odh-dashboard-rhel9:1779189627, satellite/iop-advisor-frontend-rhel9:1781181673. Resolved in Red Hat advisory RHSA-2026:6309 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7; and 31 more.
High [CVE-2026-26007] cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves. Red Hat rates this important (CVSS 7.4). Weakness: CWE-354. Affected package(s): ansible-automation-platform, quay/quay-rhel9:1775069491, rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1776336652, fence-agents, rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9:1776319190, rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1776318795. Resolved in Red Hat advisory RHSA-2026:6309 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions; and 14 more.