Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
1637 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 33 critical, 619 high, 814 medium, 169 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
High [CVE-2026-76183] Authentication Bypass in WebSocket Endpoints
Authentication Bypass in WebSocket Endpoints. Red Hat rates this important (CVSS 7.4). Weakness: CWE-289. Red Hat lists fixing advisory RHSA-2026:68257 with package tomcat11-main-11.0.26-0.1.hum1, tomcat10-main-10.1.60-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat JBoss Web Server 5; Red Hat JBoss Web Server 6; Red Hat JBoss Web Server 7; and 2 more.
High [CVE-2024-53920 +1] arbitrary code execution in Flymake mode
arbitrary code execution in Flymake mode. Red Hat rates this important (CVSS 7.8). Weakness: CWE-94. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: emacs.
High [CVE-2026-89425] Denial of Service via unbounded StringBuilder growth during malformed token processing
Denial of Service via unbounded StringBuilder growth during malformed token processing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1050. Affected products named by the advisory: OpenShift Developer Tools and Services; OpenShift Serverless; Red Hat AI Inference Server; Red Hat Ansible Automation Platform 2; and 13 more. Affected products named by the advisory: Red Hat build of Apache Camel for Spring Boot 4; Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; Red Hat Certificate System 10; and 9 more.
High [CVE-2026-96269] Arbitrary code execution upon opening a file
Arbitrary code execution upon opening a file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-94. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: emacs.
High [CVE-2026-95818] Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
Local attacker can cause denial of service and information disclosure via stack-based buffer overflow. Red Hat rates this moderate (CVSS 7). Weakness: CWE-120. Red Hat lists fixing advisory RHSA-2026:72503 with package glibc-main-2.43-8.7.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 3 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: glibc.
High [CVE-2026-86805] Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader. Red Hat rates this moderate (CVSS 7). Weakness: CWE-367. Red Hat lists fixing advisory RHSA-2026:72503 with package glibc-main-2.43-8.7.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 3 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: glibc.
High [CVE-2026-94640] Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service
A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to persistent memory growth and increased CPU usage. This can degrade or exhaust service availability. Red Hat severity: Important — CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-400. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: rpcbind.
High [CVE-2026-95619] libstdc++ integer overflow in `new` operator
libstdc++ integer overflow in `new` operator. Red Hat rates this moderate (CVSS 7.7). Weakness: CWE-190. Red Hat lists fixing advisory RHSA-2026:67275 with package gcc-main-16.2.1-2.hum1, gcc13-main-13.5.0-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 3 more. Affected products named by the advisory: Red Hat package: gcc; Red Hat package: mingw-gcc; Red Hat package: rteval-loads.
High [CVE-2026-63276] stack buffer overflow in CFF to Type 1 font conversion
stack buffer overflow in CFF to Type 1 font conversion. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-121. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libreoffice.
High [CVE-2026-63275] stack buffer overflow in CFF font hint handling
stack buffer overflow in CFF font hint handling. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-121. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libreoffice.
High [CVE-2026-63274] heap buffer overflow in PDF import stream handling
heap buffer overflow in PDF import stream handling. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libreoffice.
High [CVE-2026-95508] heap buffer overflow in DHCPv6/TFTP response builders on small interface MTU
heap buffer overflow in DHCPv6/TFTP response builders on small interface MTU. Red Hat rates this moderate (CVSS 7.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: libslirp.
High [CVE-2026-94184] Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening. Affects v5.0.8 through v6.6.6. Red Hat provided an estimated impact and CVSS vector and is subject to change. Red Hat severity: Important. Weakness: CWE-121. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: fetchmail.
High [CVE-2026-88807] Code injection via heap overflow in RenderQueryPictFormats
Code injection via heap overflow in RenderQueryPictFormats. Red Hat rates this important (CVSS 8.3). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libxrender.
High [CVE-2026-88806] Heap-based buffer overflow via malicious X server
Heap-based buffer overflow via malicious X server. Red Hat rates this important (CVSS 7.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libx11.
High [CVE-2026-47321] Denial of Service via unbounded decompression amplification
Denial of Service via unbounded decompression amplification. Red Hat rates this important (CVSS 7.5). Weakness: CWE-409. Affected products named by the advisory: OpenShift Developer Tools and Services; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat Fuse 7; Red Hat package: maven-wagon.
High [CVE-2026-93749] Denial of Service via malformed indexed source maps
Denial of Service via malformed indexed source maps. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1285. Affected products named by the advisory: Cost Management On Premise; Gatekeeper 3; Migration Toolkit for Containers; Node HealthCheck Operator; and 36 more. Affected products named by the advisory: OpenShift Lightspeed; OpenShift Pipelines; Red Hat 3scale API Management Platform 2; Red Hat AMQ Broker 7; and 32 more.
High [CVE-2026-93657] DNSSEC validation bypass allows forged DNS records
DNSSEC validation bypass allows forged DNS records. Red Hat rates this important (CVSS 7.5). Weakness: CWE-354. Affected products named by the advisory: Logging Subsystem for Red Hat OpenShift; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift AI (RHOAI); and 2 more. Affected products named by the advisory: Red Hat Trusted Profile Analyzer; Red Hat package: rust-sequoia-sq.
High [CVE-2026-93599] Denial of Service via crafted Certificate Revocation List
Denial of Service via crafted Certificate Revocation List. Red Hat rates this important (CVSS 7.5). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:57200 with package chunkah-main-0.6.0-3.hum1, rust-main-1.98.1-1.hum1, aardvark-dns-main-2.1.0-1.hum1, openshell-main-0.0.116-0.2.hum1. Affected products named by the advisory: Red Hat Hardened Images; Ansible Automation Orchestrator 2026; Confidential Cluster Operator; Logging Subsystem for Red Hat OpenShift; and 28 more. Affected products named by the advisory: Migration Toolkit for Applications 8; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; Red Hat Discovery 2; and 24 more.
High [CVE-2026-81627] Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory. This flaw allows a privileged guest to bypass SMRAM locking on Q35 machine types by placing the VAPIC writable ROM alias outside the option-ROM window. While the kvmvapic TPR optimization is normally used only by 32-bit Windows guests, any privileged guest can deliberately invoke the VAPIC setup hypercall to trigger the vulnerable code path. Exploitation requires guest root access and KVM acceleration. Red Hat severity: Important — CVSS 8.2 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux for NVIDIA 26; Red Hat OpenShift Container Platform 4; Red Hat OpenStack Platform 13 (Queens). Red Hat lists Red Hat Enterprise Linux 6 as not affected. Will not fix / out of support: Red Hat Enterprise Linux for NVIDIA 26; Red Hat OpenStack Platform 13 (Queens). Red Hat does not currently list a fixing RHSA for this CVE.