Red Hat Linux Security Advisories & CVEs
5441 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-50162] File store write outside working directory via symlink traversal
File store write outside working directory via symlink traversal. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-22.
Medium [CVE-2026-50151] Credential forwarding via unvalidated Location header during blob upload
Credential forwarding via unvalidated Location header during blob upload. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-522.
Medium [CVE-2026-50163] Information disclosure and arbitrary file access via crafted tarball hardlinks
Information disclosure and arbitrary file access via crafted tarball hardlinks. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-22.
Medium [CVE-2026-48815] Unauthorized certificates accepted due to ignored `certificateOIDs` verification option
Unauthorized certificates accepted due to ignored `certificateOIDs` verification option. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-345.
Medium [CVE-2026-48816] Insufficient verification of data authenticity allows timestamp manipulation
Insufficient verification of data authenticity allows timestamp manipulation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-345.
Medium [CVE-2026-55688] Cookie injection allows planting cookies for unrelated domains
Cookie injection allows planting cookies for unrelated domains. Red Hat rates this moderate (CVSS 4). Weakness: CWE-346.
Medium [CVE-2026-55597] Heap buffer overwrite via incorrect argument handling in JP2 encoder
Heap buffer overwrite via incorrect argument handling in JP2 encoder. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-55595] Denial of Service via invalid arguments to connected-components option
Denial of Service via invalid arguments to connected-components option. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-835.
Medium [CVE-2026-55594] Denial of Service via crafted image in MVG decoder
Denial of Service via crafted image in MVG decoder. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-787.
Medium [CVE-2026-55577] Heap buffer overflow in MVG decoder allows out-of-bounds write
Heap buffer overflow in MVG decoder allows out-of-bounds write. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-787.
Medium [CVE-2026-55510] Denial of Service via crafted 8BIM profile
Denial of Service via crafted 8BIM profile. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-53467] Information disclosure vulnerability in MNG decoder
Information disclosure vulnerability in MNG decoder. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-908.
Medium [CVE-2026-13769] Information disclosure via overly permissive file permissions
Information disclosure via overly permissive file permissions. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-277.
Medium [CVE-2026-53466] Denial of Service via integer overflow in XCF decoder
Denial of Service via integer overflow in XCF decoder. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-55628] Unauthorized file access due to missing policy checks in concatenate operation
Unauthorized file access due to missing policy checks in concatenate operation. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-1220.
Medium [CVE-2026-53489] Arbitrary host file read via symlink following in CRI checkpoint restore
Arbitrary host file read via symlink following in CRI checkpoint restore. Red Hat rates this important (CVSS 6.5). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:15862 with package syft-main-1.46.0-0.1.hum1, grype-main-0.115.0-0.1.hum1, trivy-main-0.69.3-1.2.hum1.
Medium [CVE-2026-50195] Arbitrary code execution via CRI checkpoint image tag poisoning
Arbitrary code execution via CRI checkpoint image tag poisoning. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1289. Red Hat lists fixing advisory RHSA-2026:35111 with package trivy-main-0.72.0-0.1.hum1.
Medium [CVE-2026-47262] Denial of Service via maliciously crafted image leading to unbounded group parsing
Denial of Service via maliciously crafted image leading to unbounded group parsing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:26990 with package syft-main-1.46.0-0.1.hum1, kubernetes1-36-main-1.36.2-2.hum1, trivy-main-0.72.0-0.1.hum1, kubernetes1-35-main-1.35.6-1.hum1.
Medium [CVE-2026-5051] Audit device validation bypass via legacy file audit path option
Audit device validation bypass via legacy file audit path option. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-807.
Medium [CVE-2026-12480] Information disclosure via malicious model archive with Virtual Dataset
Information disclosure via malicious model archive with Virtual Dataset. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-22.