Red Hat Linux Security Advisories & CVEs
5439 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-54899] Use-After-Free in parser symbol key cache toggle
Use-After-Free in parser symbol key cache toggle. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-825.
Medium [CVE-2026-54673] Information disclosure via unstripped credential headers during HTTP redirects
Information disclosure via unstripped credential headers during HTTP redirects. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-201.
Medium [CVE-2026-57204] Denial of Service via crafted PDF with missing stream length
Denial of Service via crafted PDF with missing stream length. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770.
Medium [CVE-2026-49478] Server-Side Request Forgery and Kubernetes ServiceAccount token leakage
Server-Side Request Forgery and Kubernetes ServiceAccount token leakage. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-918.
Medium [CVE-2026-49835] Denial of Service via unbounded metric label cardinality
Denial of Service via unbounded metric label cardinality. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-770.
Medium [CVE-2026-13455] Information Disclosure via brute-force attack on hash function
Information Disclosure via brute-force attack on hash function. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-916.
Medium [CVE-2026-58015] Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash. To exploit this flaw, an attacker must be in a position to perform a man-in-the-middle (MitM) attack on the connection or operate a malicious server that the client connects to. Furthermore, extracting data requires an oracle attack (guessing and hashing), increasing the complexity of exploitation. However, if successful, this issue allows the exfiltration of sensitive secrets, such as SSH keys or API tokens, from the filesystem. Due to these reasons, this vulnerability has been rated with a moderate severity. Red Hat severity: Moderate — CVSS 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-22. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat lists Red Hat Hardened Images as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-58013] Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-58012] Glib: buffer over-read in g_regex_replace via glib/gregex.c:string_append and g_utf8_next_char
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-58011] Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-58010] Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-53432] Denial of Service via Integer Overflow in FuzzyMatchV2 function
Denial of Service via Integer Overflow in FuzzyMatchV2 function. Red Hat rates this moderate (CVSS 5). Weakness: CWE-190.
Medium [CVE-2026-4629] Keycloak: keycloak: privilege escalation through hardcoded role mapper injection
A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This action allows the user to bypass existing scope restrictions and inject the `realm-admin` role into generated tokens, resulting in privilege escalation and full administrative access to the realm. Affected product named by the advisory: Red Hat build of Keycloak 26.4.
Medium [CVE-2026-12388] Privilege escalation to realm administrator via improper authorization in identity provider mapper
Privilege escalation to realm administrator via improper authorization in identity provider mapper. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-266.
Medium [CVE-2026-14209] keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions
keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639.
Medium [CVE-2026-53917] Denial of Service via crafted OpenWire Message
Denial of Service via crafted OpenWire Message. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770.
Medium [CVE-2026-14101] Insufficient policy enforcement in Sandbox
Insufficient policy enforcement in Sandbox. Red Hat rates this low (CVSS 5.7). Weakness: CWE-653.
Low [CVE-2026-56377] ImageMagick - Policy Bypass via Incorrect Path Validation
ImageMagick - Policy Bypass via Incorrect Path Validation. Red Hat rates this low (CVSS 3.3). Weakness: CWE-22.
Low [CVE-2026-56369] Information disclosure due to AES-CTR nonce reuse
Information disclosure due to AES-CTR nonce reuse. Red Hat rates this low (CVSS 3.7). Weakness: CWE-323.
Low [CVE-2026-56365] Magick.NET-Q16-OpenMP-arm64: Magick.NET-Q16-OpenMP-x64: Magick.NET-Q16-arm64: Magick.NET-Q16-x64: Magick.NET-Q16-x86: Magick.NET-Q16-HDRI-OpenMP-x64: Magick.NET-Q8-AnyCPU: Magick.NET-Q8-OpenMP-arm6…
Magick.NET-Q16-OpenMP-arm64: Magick.NET-Q16-OpenMP-x64: Magick.NET-Q16-arm64: Magick.NET-Q16-x64: Magick.NET-Q16-x86: Magick.NET-Q16-HDRI-OpenMP-x64: Magick.NET-Q8-AnyCPU: Magick.NET-Q8-OpenMP-arm64: Magick.NET-Q8-OpenMP-x64: Magick.NET-Q8-arm64: Magick.NET-Q8-x64: Magick.NET-Q8-x86: ImageMagick: Denial of Service due to memory leak in PNG encoder when processing MNG images. Red Hat rates this low (CVSS 3.7). Weakness: CWE-401.