Red Hat Linux Security Advisories & CVEs
11827 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-89695] cap decoded POSIX ACL count to bound sort cost
cap decoded POSIX ACL count to bound sort cost. Red Hat rates this moderate (CVSS 7). Weakness: CWE-606. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89694] check client ownership when cancelling a copy-notify stateid
check client ownership when cancelling a copy-notify stateid. Red Hat rates this moderate (CVSS 7). Weakness: CWE-639. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89693] check nfsd4_acl_to_attr return value in nfsd4_create
check nfsd4_acl_to_attr() return value in nfsd4_create(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-252. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89691] clear opcnt on compound arg release to prevent OOB read
clear opcnt on compound arg release to prevent OOB read. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89690] defer vfree of compound ops to fix rpc_status UAF
defer vfree of compound ops to fix rpc_status UAF. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89688] drop the stateid, not the stateowner, on seqid_op replay retry
drop the stateid, not the stateowner, on seqid_op replay retry. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89689] don't free session slots that are still in use
don't free session slots that are still in use. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel-rt.
High [CVE-2026-89686] fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89685] fix clock domain mismatch in clients_still_reclaiming
fix clock domain mismatch in clients_still_reclaiming(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-1025. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89684] fix cpntf publish race in nfs4_init_cp_state
fix cpntf publish race in nfs4_init_cp_state. Red Hat rates this moderate (CVSS 7). Weakness: CWE-824. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89683] fix dentry ref leak on V4ROOT export filehandle lookup
fix dentry ref leak on V4ROOT export filehandle lookup. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel-rt.
High [CVE-2026-89682] fix fcache_disposal UAF by inlining dispose state into nfsd_net
fix fcache_disposal UAF by inlining dispose state into nfsd_net. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89681] fix layout fence worker double-reference race
fix layout fence worker double-reference race. Red Hat rates this moderate (CVSS 7). Weakness: CWE-772. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89680] fix nfsd_file leak on inter-server COPY setup failure
fix nfsd_file leak on inter-server COPY setup failure. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89678] fix partial-write detection in nfsd_direct_write
fix partial-write detection in nfsd_direct_write. Red Hat rates this moderate (CVSS 7). Weakness: CWE-823. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89677] fix possible fh_compose of wrong dentry in nfsd4_create_file
fix possible fh_compose of wrong dentry in nfsd4_create_file(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
High [CVE-2026-89676] fix stale s2s_cp_stateids IDR entry for async COPY
fix stale s2s_cp_stateids IDR entry for async COPY. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89675] fix UAF in async copy cancel and shutdown
fix UAF in async copy cancel and shutdown. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89672] gate nfs2 setacl by argp->mask
gate nfs2 setacl by argp->mask. Red Hat rates this moderate (CVSS 7). Weakness: CWE-266. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89671] gate nfs3 setacl by argp->mask
gate nfs3 setacl by argp->mask. Red Hat rates this moderate (CVSS 7). Weakness: CWE-115. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.