Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2537 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 897 high, 1323 medium, 265 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Low [CVE-2026-116160] Denial of Service via crafted image in X11 animate operation
Denial of Service via crafted image in X11 animate operation. Red Hat rates this low (CVSS 3.3). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116158] Denial of Service via memory leak in compare command
Denial of Service via memory leak in compare command. Red Hat rates this low (CVSS 2.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116159] Denial of Service via memory leak in the -cdl option
Denial of Service via memory leak in the -cdl option. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116157] Denial of Service via memory leak in PerlMagick
Denial of Service via memory leak in PerlMagick. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116156] Denial of Service via memory leak in -set profile option
Denial of Service via memory leak in -set profile option. Red Hat rates this low (CVSS 3.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116153] Denial of Service via heap-based buffer overflow in convex-hull calculations
Denial of Service via heap-based buffer overflow in convex-hull calculations. Red Hat rates this low (CVSS 2.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116150] Denial of Service via memory leak in FPX encoder
Denial of Service via memory leak in FPX encoder. Red Hat rates this low (CVSS 3.1). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116151] Denial of Service via memory leak in JNG encoder
Denial of Service via memory leak in JNG encoder. Red Hat rates this low (CVSS 3.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116148] Command injection via unvalidated drawing options in MVG encoder
Command injection via unvalidated drawing options in MVG encoder. Red Hat rates this low (CVSS 3.6). Weakness: CWE-94. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116147] Denial of service via unchecked memory allocation in DJVU decoder
Denial of service via unchecked memory allocation in DJVU decoder. Red Hat rates this low (CVSS 3.7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116146] Denial of Service via MSL decoder memory leak
Denial of Service via MSL decoder memory leak. Red Hat rates this low (CVSS 3.7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116144] Denial of Service via uncontrolled recursion in MVG decoder
Denial of Service via uncontrolled recursion in MVG decoder. Red Hat rates this low (CVSS 3.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116143] Denial of Service via scene selection policy bypass
Denial of Service via scene selection policy bypass. Red Hat rates this low (CVSS 3.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116140] Security policy bypass via flawed delegate invocation parsing
Security policy bypass via flawed delegate invocation parsing. Red Hat rates this low (CVSS 3.3). Weakness: CWE-184. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-116137] File integrity check bypass via duplicate archive entries
File integrity check bypass via duplicate archive entries. Red Hat rates this low (CVSS 3.7). Weakness: CWE-41. Affected products named by the advisory: Cost Management On Premise; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Build of Podman Desktop; Red Hat Connectivity Link 1; and 9 more. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; and 5 more.
High [CVE-2026-115893] Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction. Red Hat rates this important (CVSS 8.8). Weakness: CWE-190. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
High [CVE-2026-115889] Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Bit-packing in Cranelift compiler causes silent overflow and miscompilation. Red Hat rates this important (CVSS 8.8). Weakness: CWE-190. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
High [CVE-2026-55888] Unauthorized host file access via unvalidated FileChooser filenames
Unauthorized host file access via unvalidated FileChooser filenames. Red Hat rates this important (CVSS 8.2). Weakness: CWE-22. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: xdg-desktop-portal.
Medium [CVE-2026-115892] Denial of Service via missing payload type validation in guest returns
Denial of Service via missing payload type validation in guest returns. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-843. Affected products named by the advisory: Red Hat Connectivity Link 1; Red Hat Enterprise Linux 10; Red Hat package: tree-sitter; Red Hat package: virt-firmware-rs.
Medium [CVE-2026-106074] predictable random values via snapshot entropy cache reuse
predictable random values via snapshot entropy cache reuse. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-335. Red Hat lists fixing advisory RHSA-2026:92378 with package nodejs:24-9080020261027142403.rhel9, nodejs:24-8100020261027151919.6d880403. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: nodejs22; and 2 more. Affected products named by the advisory: Red Hat package: nodejs24; Red Hat package: nodejs26.