Red Hat Linux Security Advisories & CVEs
10918 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-92867] arbitrary code execution via out-of-bounds write
arbitrary code execution via out-of-bounds write. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787.
High [CVE-2026-103111] Out-of-bounds write via crafted regular expression
Out-of-bounds write via crafted regular expression. Red Hat rates this important (CVSS 7.6). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:74972 with package pcre2-main-10.49-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 6 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: mariadb10.11; Red Hat package: mariadb11.8; and 2 more.
Medium [CVE-2026-103001] Token validation bypass via options dictionary mutation
Token validation bypass via options dictionary mutation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-358.
Medium [CVE-2026-102995] Denial of Service via excessive memory consumption in font mapping
Denial of Service via excessive memory consumption in font mapping. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Lightspeed Core; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat Quay 3.
Medium [CVE-2026-102993] Denial of Service via crafted Roman page labels
Denial of Service via crafted Roman page labels. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Lightspeed Core; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat Quay 3.
Medium [CVE-2026-103387] Denial of Service via crafted mailto URI
Denial of Service via crafted mailto URI. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-248. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-103399] HTTP/1 request smuggling via undrained Expect: 100-continue body
HTTP/1 request smuggling via undrained Expect: 100-continue body. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-444. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libsoup3-devel; Red Hat package: libsoup3-doc; Red Hat package: libsoup3.src; and 2 more.
Medium [CVE-2026-47562] Denial of Service via kernel log injection
Denial of Service via kernel log injection. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-117. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47531] Denial of Service via null pointer dereference in kernel mode layer
Denial of Service via null pointer dereference in kernel mode layer. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47526] Denial of Service via null pointer dereference in firmware
Denial of Service via null pointer dereference in firmware. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47604] Information disclosure via missing authorization checks
Information disclosure via missing authorization checks. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-283. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47603] Information disclosure via missing authorization in kernel mode driver
Information disclosure via missing authorization in kernel mode driver. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-283. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47584] Denial of Service via NULL pointer dereference in kernel module
Denial of Service via NULL pointer dereference in kernel module. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47568] Denial of Service via uncontrolled kernel logging
Denial of Service via uncontrolled kernel logging. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47567] Denial of Service via DRM VMA address space exhaustion
Denial of Service via DRM VMA address space exhaustion. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47566] Denial of Service via kernel memory leak
Denial of Service via kernel memory leak. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47557] Denial of Service via NULL pointer dereference in kernel mode layer
Denial of Service via NULL pointer dereference in kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47555] Information disclosure via uninitialized kernel memory copy
Information disclosure via uninitialized kernel memory copy. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47534] Denial of Service via divide-by-zero in kernel mode layer
Denial of Service via divide-by-zero in kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47517] Denial of Service via crafted ioctl request
Denial of Service via crafted ioctl request. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.