Red Hat Linux Security Advisories & CVEs
3124 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-72438] fix writes_pending and barrier reference leaks on discard failures
fix writes_pending and barrier reference leaks on discard failures. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-72418] prevent connlimit drops for early confirmed ct
prevent connlimit drops for early confirmed ct. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-72211] grow index root value before reparent header update
grow index root value before reparent header update. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-130.
Medium [CVE-2026-72167] fix probe resource allocation
fix probe resource allocation. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72385] Fix NULL pointer dereference in fprobe_fgraph_entry
Fix NULL pointer dereference in fprobe_fgraph_entry(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-72332] Prevent PM resume deadlock in hwctx_sync_debug_bo
Prevent PM resume deadlock in hwctx_sync_debug_bo(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-833.
Medium [CVE-2026-72203] skip extent mft records in writeback to prevent deadlock
skip extent mft records in writeback to prevent deadlock. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-833.
Medium [CVE-2026-72134] reconfigure for PIO when DMA cannot be started
reconfigure for PIO when DMA cannot be started. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-909.
Medium [CVE-2026-72131] Prevent shared tags across queues on Apple A11
Prevent shared tags across queues on Apple A11. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-694.
Medium [CVE-2026-72133] Fix completion initialization order before devm_request_irq
Fix completion initialization order before devm_request_irq(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908.
Medium [CVE-2026-72132] Charge unstable writes by request size, not folio size
Charge unstable writes by request size, not folio size. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72146] Move interrupt request after everything is set up
Move interrupt request after everything is set up. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-824.
Medium [CVE-2026-72175] fix make_uffd_wp_huge_pte prot-update race
fix make_uffd_wp_huge_pte() prot-update race. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-72254] reject fib expression on the netdev egress hook
reject fib expression on the netdev egress hook. Red Hat rates this low (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72197] bound DeleteIndexEntryAllocation memmove length
bound DeleteIndexEntryAllocation memmove length. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-72299] restrict socket queue dumps in enqueue tracepoints
restrict socket queue dumps in enqueue tracepoints. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72158] add bounds check in dfh_get_param_size
add bounds check in dfh_get_param_size(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-805.
Medium [CVE-2026-72156] fix zero header_size OOB read in mpf_ops_parse_header
fix zero header_size OOB read in mpf_ops_parse_header(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-72145] use cleanup helpers in mem_write
use cleanup helpers in mem_write(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72257] fix NULL pointer dereference in graph_callback
fix NULL pointer dereference in graph_callback. Red Hat rates this low (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.