Red Hat Linux Security Advisories & CVEs
10918 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-47492] Denial of Service via improper access control in the kernel mode layer
Denial of Service via improper access control in the kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-862.
Medium [CVE-2026-47518] Code execution via improper permission assignment in secure microcontroller
Code execution via improper permission assignment in secure microcontroller. Red Hat rates this moderate (CVSS 6). Weakness: CWE-266. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47586] arbitrary code execution via kernel module use-after-free
arbitrary code execution via kernel module use-after-free. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47565] arbitrary code execution via kernel mode race condition
arbitrary code execution via kernel mode race condition. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47547] Arbitrary code execution via improper input validation in firmware
Arbitrary code execution via improper input validation in firmware. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-20.
Medium [CVE-2026-47543] arbitrary code execution via improper input validation in kernel mode layer
arbitrary code execution via improper input validation in kernel mode layer. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-20.
Medium [CVE-2026-47538] Arbitrary code execution via firmware out-of-bounds write
Arbitrary code execution via firmware out-of-bounds write. Red Hat rates this moderate. Weakness: CWE-787.
Medium [CVE-2026-47537] arbitrary code execution via out-of-bounds write in kernel mode layer
arbitrary code execution via out-of-bounds write in kernel mode layer. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47533] arbitrary code execution via kernel-mode array indexing flaw
arbitrary code execution via kernel-mode array indexing flaw. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47532] Arbitrary code execution via kernel mode out-of-bounds write
Arbitrary code execution via kernel mode out-of-bounds write. Red Hat rates this moderate. Weakness: CWE-787.
Medium [CVE-2026-47527] Arbitrary code execution via firmware out-of-bounds read
Arbitrary code execution via firmware out-of-bounds read. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47525] Arbitrary code execution via improper array index validation
Arbitrary code execution via improper array index validation. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47524] Arbitrary code execution via out-of-bounds read
Arbitrary code execution via out-of-bounds read. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47515] Arbitrary code execution via kernel-mode unbounded string operation
Arbitrary code execution via kernel-mode unbounded string operation. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-103118] Denial of Service via uncontrolled recursion in WPG file handler
Denial of Service via uncontrolled recursion in WPG file handler. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-835.
Medium [CVE-2026-13719] Information disclosure via alert rules list API
Information disclosure via alert rules list API. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-863. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 4 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: grafana.
Medium [CVE-2026-13720] Dashboard modification lockout via forged file-provisioning metadata
Dashboard modification lockout via forged file-provisioning metadata. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 4 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: grafana.
Medium [CVE-2026-94029] Denial of Service via memory exhaustion in SFTP check-file extension
Denial of Service via memory exhaustion in SFTP check-file extension. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apicurio Registry 3; Red Hat Fuse 7.
Medium [CVE-2026-92872] Information disclosure via log files
Information disclosure via log files. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-538.
Medium [CVE-2026-92869] Denial of Service via out-of-bounds write
Denial of Service via out-of-bounds write. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-787.