Red Hat Linux Security Advisories & CVEs
5545 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
High [CVE-2026-67312] Denial of Service via uncontrolled recursion in form data processing
Denial of Service via uncontrolled recursion in form data processing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-674. Red Hat lists fixing advisory RHSA-2026:47619 with package jaeger-main-2.20.0-0.8.hum1, grafana13-1-main-13.1.1-0.3.hum1, grafana12-4-main-12.4.6-0.2.hum1.
High [CVE-2026-67321] Denial of Service via object serialization bypass
Denial of Service via object serialization bypass. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:47619 with package jaeger-main-2.20.0-0.8.hum1, grafana13-1-main-13.1.1-0.3.hum1, grafana12-4-main-12.4.6-0.2.hum1.
High [CVE-2026-67324] Arbitrary Code Execution via Joined Short Options Bypass
Arbitrary Code Execution via Joined Short Options Bypass. Red Hat rates this important (CVSS 8.8). Weakness: CWE-78.
High [CVE-2026-67298] Denial of Service via integer underflow in RAIL channel handling
Denial of Service via integer underflow in RAIL channel handling. Red Hat rates this important (CVSS 7.1). Weakness: CWE-191.
High [CVE-2026-67320] Information disclosure via Prototype Pollution in Node HTTP adapter
Information disclosure via Prototype Pollution in Node HTTP adapter. Red Hat rates this important (CVSS 7.4). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:47619 with package jaeger-main-2.20.0-0.8.hum1, grafana13-1-main-13.1.1-0.3.hum1, grafana12-4-main-12.4.6-0.2.hum1.
High [CVE-2026-67322] Environment variable exfiltration via attacker-controlled clone URL
Environment variable exfiltration via attacker-controlled clone URL. Red Hat rates this important (CVSS 7.5). Weakness: CWE-214. Red Hat lists fixing advisory RHSA-2026:44416 with package swift-lang-main-6.3.3-0.1.1.hum1, llvm21-main-21.1.8-8.hum1, llvm-main-22.1.8-4.1.hum1.
High [CVE-2026-67325] Command Injection via Git option prefix abbreviation
Command Injection via Git option prefix abbreviation. Red Hat rates this important (CVSS 8.8). Weakness: CWE-78. Red Hat lists fixing advisory RHSA-2026:44416 with package swift-lang-main-6.3.3-0.1.1.hum1, llvm21-main-21.1.8-8.hum1, llvm-main-22.1.8-4.1.hum1.
High [CVE-2026-67313] Denial of Service via uncontrolled recursion in formDataToJSON
Denial of Service via uncontrolled recursion in formDataToJSON. Red Hat rates this important (CVSS 7.5). Weakness: CWE-674. Red Hat lists fixing advisory RHSA-2026:50826 with package jaeger-main-2.20.0-0.8.hum1, grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
High [CVE-2026-67314] Outbound Request Tampering via Prototype Pollution in Basic Auth
Outbound Request Tampering via Prototype Pollution in Basic Auth. Red Hat rates this important (CVSS 7.4). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:50826 with package jaeger-main-2.20.0-0.8.hum1, grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
High [CVE-2026-67305] Remote Code Execution via Heap Buffer Overflow in Clipboard Processing
Remote Code Execution via Heap Buffer Overflow in Clipboard Processing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-122.
Medium [CVE-2026-67302] Denial of service in camera redirection due to divide-by-zero
Denial of service in camera redirection due to divide-by-zero. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-369.
Medium [CVE-2026-67306] Out-of-bounds read vulnerability via crafted RDP messages
Out-of-bounds read vulnerability via crafted RDP messages. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-125.
Medium [CVE-2026-67295] Unauthorized File Access via Drive Redirection Vulnerability
Unauthorized File Access via Drive Redirection Vulnerability. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-22.
Medium [CVE-2026-67300] Use-After-Free vulnerability leading to denial of service
Use-After-Free vulnerability leading to denial of service. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-825.
Medium [CVE-2026-67292] Information Disclosure and Denial of Service via WebSocket Ping
Information Disclosure and Denial of Service via WebSocket Ping. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-805.
Medium [CVE-2026-67299] Denial of Service via crafted WindowIcon async message
Denial of Service via crafted WindowIcon async message. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-416.
Medium [CVE-2026-67318] Denial of Service due to maxBodyLength bypass in HTTP/2 requests
Denial of Service due to maxBodyLength bypass in HTTP/2 requests. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:50826 with package grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
Medium [CVE-2026-67315] NO_PROXY bypass allows exposure of local services
NO_PROXY bypass allows exposure of local services. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-115. Red Hat lists fixing advisory RHSA-2026:50826 with package grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
Medium [CVE-2026-67319] Information disclosure and data manipulation via prototype pollution
Information disclosure and data manipulation via prototype pollution. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:49387 with package grafana13-1-main-13.1.1-0.4.hum1, grafana12-4-main-12.4.6-0.3.hum1.
Medium [CVE-2026-67291] Denial of Service via heap out-of-bounds read
Denial of Service via heap out-of-bounds read. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.