Red Hat Linux Security Advisories & CVEs
11827 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-89669] initialize copy-notify stateid before publishing it
initialize copy-notify stateid before publishing it. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89670] hold rcu across localio cmpxchg retry
hold rcu across localio cmpxchg retry. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89668] move nfsd_debugfs_init after nfsd4_init_slabs in init_nfsd
move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel-rt.
High [CVE-2026-89665] reject out-of-range useconds in NFSv2 SETATTR/CREATE
reject out-of-range useconds in NFSv2 SETATTR/CREATE. Red Hat rates this moderate (CVSS 7). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89666] reject out-of-range nseconds in NFSv3 SETATTR and create ops
reject out-of-range nseconds in NFSv3 SETATTR and create ops. Red Hat rates this moderate (CVSS 7). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89664] release OPEN-decoded posix ACLs via op_release
release OPEN-decoded posix ACLs via op_release. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel-rt.
High [CVE-2026-89663] revoke copy-notify stateids before dropping their reference
revoke copy-notify stateids before dropping their reference. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89662] Prevent lock owner use-after-free during client teardown
Prevent lock owner use-after-free during client teardown. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89660] Prevent client use-after-free during admin state revocation
Prevent client use-after-free during admin state revocation. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89659] Prevent client use-after-free during delegation revoke
Prevent client use-after-free during delegation revoke. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89658] Prevent client use-after-free during NFSv4.0 revoked-state cleanup
Prevent client use-after-free during NFSv4.0 revoked-state cleanup. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89657] validate OSD extent maps before cursor advance
validate OSD extent maps before cursor advance. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89656] reject buckets with mismatched CRUSH ids
reject buckets with mismatched CRUSH ids. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89654] fix UAF in check_new_map on session freed during unlock
fix UAF in check_new_map() on session freed during unlock. Red Hat rates this moderate (CVSS 7). Weakness: CWE-364. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89655] fix UAF in __kick_flushing_caps on cf entry freed during unlock
fix UAF in __kick_flushing_caps() on cf entry freed during unlock. Red Hat rates this moderate (CVSS 7). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89653] reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode. Red Hat rates this important (CVSS 8.1). Weakness: CWE-787. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89652] bound copied dentry name length in NFS export get_name
bound copied dentry name length in NFS export get_name. Red Hat rates this important (CVSS 7). Weakness: CWE-120. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89651] bound MDSCapAuth path and fs_name decode in handle_session
bound MDSCapAuth path and fs_name decode in handle_session(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89650] bound num_export_targets array for mds info v2/v3
bound num_export_targets array for mds info v2/v3. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89649] bound xattr value length in __build_xattrs
bound xattr value length in __build_xattrs(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.