Red Hat Linux Security Advisories & CVEs
11827 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-89648] cap delegated inode count in ceph_parse_deleg_inos
cap delegated inode count in ceph_parse_deleg_inos(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-606. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89643] avoid dropping live tree ref on fsnotify rule autoremove
avoid dropping live tree ref on fsnotify rule autoremove. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89642] call pagecache_isize_extended in cifs_setsize when extending
call pagecache_isize_extended() in cifs_setsize() when extending. Red Hat rates this moderate (CVSS 7). Weakness: CWE-201. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89641] clear tcon after cifsFileInfo_put in cifs_file_set_size
clear tcon after cifsFileInfo_put() in cifs_file_set_size(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89638] clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions. Red Hat rates this important (CVSS 7.8). Weakness: CWE-281. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89637] fix UAF and buffer leak in cifs_check_trans2 for malformed secondary T2
fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89636] clear ce->tgthint in free_tgts
clear ce->tgthint in free_tgts(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89634] fix ALIGN overflow in symlink_data error context loop
fix ALIGN() overflow in symlink_data() error context loop. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89633] fix OOB read/write from unvalidated DataOffset in coalesce_t2
fix OOB read/write from unvalidated DataOffset in coalesce_t2(). Red Hat rates this important (CVSS 8). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89632] fix use-before-check of ReparseDataLength in reparse_buf_ptr
fix use-before-check of ReparseDataLength in reparse_buf_ptr(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89631] reject a tree connect response whose byte count is too small
reject a tree connect response whose byte count is too small. Red Hat rates this important (CVSS 8.1). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89630] restore the data_offset bound in is_valid_oplock_break
restore the data_offset bound in is_valid_oplock_break(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89626] Fix field sysfs group cleanup on failure
Fix field sysfs group cleanup on failure. Red Hat rates this moderate (CVSS 7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89625] fix UAF of ghl_poke_timer / ghl_urb at driver unbind
fix UAF of ghl_poke_timer / ghl_urb at driver unbind. Red Hat rates this moderate (CVSS 7). Weakness: CWE-364. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89620] validate report size before copy
validate report size before copy. Red Hat rates this important (CVSS 7). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89619] bound GET_REPORT response to the caller buffer
bound GET_REPORT response to the caller buffer. Red Hat rates this moderate (CVSS 7). Weakness: CWE-120. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89609] hold msg ctx list lock when cleaning daemon queue
hold msg ctx list lock when cleaning daemon queue. Red Hat rates this moderate (CVSS 7). Weakness: CWE-820. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89607] reject oversized encrypted_key_size in parse_tag_3_packet
reject oversized encrypted_key_size in parse_tag_3_packet. Red Hat rates this important (CVSS 7). Weakness: CWE-787.
High [CVE-2026-89606] reject too-small tag 70 packets
reject too-small tag 70 packets. Red Hat rates this moderate (CVSS 7). Weakness: CWE-191. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89603] Fix seccomp bypass after ptrace with TSYNC
Fix seccomp bypass after ptrace with TSYNC. Red Hat rates this important (CVSS 7.8). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.