Red Hat Linux Security Advisories & CVEs
3066 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-3009] Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass)
Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass). Red Hat rates this important (CVSS 8.1). Weakness: CWE-863. Affected package(s): rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9:26.4. Resolved in Red Hat advisory RHSA-2026:3947 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.4; Red Hat JBoss Enterprise Application Platform Expansion Pack.
High [CVE-2026-1605] Denial of Service due to unreleased JDK Inflater from compressed HTTP requests
Denial of Service due to unreleased JDK Inflater from compressed HTTP requests. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): eap8-eap-product-conf-parent, eap8-wildfly, devspaces/openvsx-rhel9:1779528224, eap8-activemq-artemis, jetty-server, devspaces/pluginregistry-rhel9:1779359423. Resolved in Red Hat advisory RHSA-2026:25089 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat OpenShift Dev Spaces 3.28; OpenShift Developer Tools and Services; and 1 more.
High [CVE-2025-45691] arbitrary file read via improper URL validation in multimodal inputs
arbitrary file read via improper URL validation in multimodal inputs. Red Hat rates this important (CVSS 7.5). Weakness: CWE-918. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2025-69534] denial of service via malformed HTML-like sequences
denial of service via malformed HTML-like sequences. Red Hat rates this important (CVSS 8.2). Weakness: CWE-617. Affected package(s): rhdh/rhdh-hub-rhel9:1776784286, python3.12-markdown, rhoai/odh-training-rocm62-torch25-py311-rhel9:1776272253, automation-controller, rhdh/rhdh-hub-rhel9:1777903262, rhoai/odh-training-cuda124-torch25-py311-rhel9:1776243287. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Enterprise Linux 10.0 Extended Update Support; and 11 more.
High [CVE-2026-27803] Unauthorized collection management operations due to improper access control
Unauthorized collection management operations due to improper access control. Red Hat rates this important (CVSS 8.3). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-27802] Privilege Escalation via Unauthorized Bulk Permission Update
Privilege Escalation via Unauthorized Bulk Permission Update. Red Hat rates this important (CVSS 8.1). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-0847] Arbitrary file read via path traversal vulnerability
Arbitrary file read via path traversal vulnerability. Red Hat rates this important (CVSS 7.5). Weakness: CWE-22. Affected package(s): rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:1778263054, rhoai/odh-llama-stack-core-rhel9:1775144403, rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1778262893. Resolved in Red Hat advisory RHSA-2026:19712 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift AI 2.25; Red Hat OpenShift AI 3.3; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 1 more.
High [CVE-2026-3520] Denial of Service via malformed requests
Denial of Service via malformed requests. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): rhdh/rhdh-hub-rhel9:1774545605, rhdh/rhdh-hub-rhel9:1775140647. Resolved in Red Hat advisory RHSA-2026:6174 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Developer Hub 1.8; Red Hat Developer Hub 1.9.
High [CVE-2025-15558] Docker CLI for Windows: Privilege escalation via malicious plugin binaries
Docker CLI for Windows: Privilege escalation via malicious plugin binaries. Red Hat rates this important (CVSS 7.3). Weakness: CWE-427. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-23231] Privilege escalation or denial of service via use-after-free in nf_tables_addchain()
Privilege escalation or denial of service via use-after-free in nf_tables_addchain(). Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-416. Affected package(s): kernel-rt, kernel. Resolved in Red Hat advisory RHSA-2026:10756 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2025-71238] Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.
Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-672. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:9870 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7.
High [CVE-2026-27622] Arbitrary code execution via integer overflow in EXR file processing
Arbitrary code execution via integer overflow in EXR file processing. Red Hat rates this important (CVSS 7.4). Weakness: CWE-190. Affected package(s): openexr, rhaiis/vllm-rocm-rhel9:1778244531, OpenEXR, rhaiis/vllm-cuda-rhel9:1778274666, rhaiis/vllm-spyre-rhel9:1778244546, rhaiis/model-opt-cuda-rhel9:1778244559. Resolved in Red Hat advisory RHSA-2026:12339 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 10 more.
High [CVE-2026-25673] Denial of Service via slow URL normalization on Windows
Denial of Service via slow URL normalization on Windows. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3540] Inappropriate implementation in WebAudio
Inappropriate implementation in WebAudio. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3536] Integer overflow in ANGLE
Integer overflow in ANGLE. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3545] Insufficient data validation in Navigation
Insufficient data validation in Navigation. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3542] Inappropriate implementation in WebAssembly
Inappropriate implementation in WebAssembly. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3538] Integer overflow in Skia
Integer overflow in Skia. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3541] Inappropriate implementation in CSS
Inappropriate implementation in CSS. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3544] Heap buffer overflow in WebCodecs
Heap buffer overflow in WebCodecs. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.