Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2522 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 49 critical, 895 high, 1318 medium, 258 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-115927] Denial of Service via chunked transfer encoding processing
Denial of Service via chunked transfer encoding processing. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1322. Affected products named by the advisory: Lightspeed Core; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 10; and 8 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); and 4 more.
Medium [CVE-2026-116497] NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemon
NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemon. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: gssproxy.src.
Medium [CVE-2026-116486] Type confusion via instantiator cache collisions
Type confusion via instantiator cache collisions. Red Hat rates this moderate (CVSS 4.5). Weakness: CWE-843. Affected products named by the advisory: Exploit Intelligence; OpenShift Serverless; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 12 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; and 8 more.
Medium [CVE-2026-116262] Denial of Service via heap-based buffer overflow in Web Inspector
Denial of Service via heap-based buffer overflow in Web Inspector. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat package: libimobiledevice.
Medium [CVE-2026-107080] Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_v
Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_v. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: openjpeg2.
High [CVE-2026-116149] Memory corruption via crafted bzip2 compressed images
Memory corruption via crafted bzip2 compressed images. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Medium [CVE-2026-116155] Denial of Service via crafted XMP profile memory leak
Denial of Service via crafted XMP profile memory leak. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Medium [CVE-2026-116154] Denial of Service via XML parsing memory leak
Denial of Service via XML parsing memory leak. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Medium [CVE-2026-116152] Denial of Service via memory leak in MAT decoder
Denial of Service via memory leak in MAT decoder. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Medium [CVE-2026-116141] Denial of Service via policy bypass in UHDR decoder
Denial of Service via policy bypass in UHDR decoder. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116160] Denial of Service via crafted image in X11 animate operation
Denial of Service via crafted image in X11 animate operation. Red Hat rates this low (CVSS 3.3). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116158] Denial of Service via memory leak in compare command
Denial of Service via memory leak in compare command. Red Hat rates this low (CVSS 2.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116159] Denial of Service via memory leak in the -cdl option
Denial of Service via memory leak in the -cdl option. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116157] Denial of Service via memory leak in PerlMagick
Denial of Service via memory leak in PerlMagick. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116156] Denial of Service via memory leak in -set profile option
Denial of Service via memory leak in -set profile option. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116153] Denial of Service via heap-based buffer overflow in convex-hull calculations
Denial of Service via heap-based buffer overflow in convex-hull calculations. Red Hat rates this low (CVSS 2.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116150] Denial of Service via memory leak in FPX encoder
Denial of Service via memory leak in FPX encoder. Red Hat rates this low (CVSS 3.1). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116151] Denial of Service via memory leak in JNG encoder
Denial of Service via memory leak in JNG encoder. Red Hat rates this low (CVSS 3.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116148] Command injection via unvalidated drawing options in MVG encoder
Command injection via unvalidated drawing options in MVG encoder. Red Hat rates this low (CVSS 3.6). Weakness: CWE-94. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116147] Denial of service via unchecked memory allocation in DJVU decoder
Denial of service via unchecked memory allocation in DJVU decoder. Red Hat rates this low (CVSS 3.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.