Red Hat Linux Security Advisories & CVEs
3109 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-72160] reject dinodes with non-canonical i_mode type
reject dinodes with non-canonical i_mode type. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1286.
Medium [CVE-2026-72198] reject non-resident records for resident-only attributes
reject non-resident records for resident-only attributes. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-843.
Medium [CVE-2026-72290] Fix GISC refcount leak on AIF enable failure
Fix GISC refcount leak on AIF enable failure. Red Hat rates this low (CVSS 5.5). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72182] fix refcount leak in is_full_charged
fix refcount leak in is_full_charged(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911.
Medium [CVE-2026-72278] Re-translate VNCR before injecting abort
Re-translate VNCR before injecting abort. Red Hat rates this low (CVSS 5.5). Weakness: CWE-280. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-72300] validate vendor array size before parsing
validate vendor array size before parsing. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72199] validate resident index root values on lookup
validate resident index root values on lookup. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1288.
Medium [CVE-2026-72370] release pages on atomic dio size mismatch
release pages on atomic dio size mismatch. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-72377] Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints
Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-72280] Drop bogus WARN for write to ZCR_EL2
Drop bogus WARN for write to ZCR_EL2. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72423] Guard conntrack opts error writes
Guard conntrack opts error writes. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72171] remove failed entries from the device list
remove failed entries from the device list. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-824.
Medium [CVE-2026-72269] fix potential memory leak in uvesafb_probe
fix potential memory leak in uvesafb_probe(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72263] fix memory leak in snd_sof_load_topology
fix memory leak in snd_sof_load_topology. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72138] fix error handling in ioctl
fix error handling in ioctl. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72481] fix potential kernel stack memory leak
fix potential kernel stack memory leak. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908.
Medium [CVE-2026-72179] Fix node reference leak in populate_cache_leaves
Fix node reference leak in populate_cache_leaves. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72188] sanitize MFT references returned from ntfs_lookup_inode_by_name
sanitize MFT references returned from ntfs_lookup_inode_by_name(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-252.
Medium [CVE-2026-72237] Fix kernel address leakage
Fix kernel address leakage. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1220. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72271] fix potential memory leak in i740fb_probe
fix potential memory leak in i740fb_probe(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.