Red Hat Linux Security Advisories & CVEs
11829 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-80952] Fix info leak and UAF in device unregister path
Fix info leak and UAF in device unregister path. Red Hat rates this moderate (CVSS 7). Weakness: CWE-824. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-80951] bound IBI payload to the requested max_payload_len
bound IBI payload to the requested max_payload_len. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-80947] fix use-after-free from rx_urb_wq on stop
fix use-after-free from rx_urb_wq on stop. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-80944] Detach sync cmd buffer on interrupted wait
Detach sync cmd buffer on interrupted wait. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-80945] iaa - unmap dst before software fallback on decompress
iaa - unmap dst before software fallback on decompress. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-80929] move the "cad_pid" entry from pid_table to kern_reboot_table
move the "cad_pid" entry from pid_table[] to kern_reboot_table[]. Red Hat rates this moderate (CVSS 7). Weakness: CWE-279. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
High [CVE-2026-68497] com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-400. Red Hat lists fixing advisory RHSA-2026:73521 with package jackson-databind, rh-lightspeed-runtimes/runtimes-agent-init-rhel9:1790202798. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; OpenShift Serverless; Red Hat AI Inference Server; and 31 more. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apache Camel - HawtIO 4; and 27 more.
High [CVE-2026-87776] Denial of Service via memory leak on premature response close
Denial of Service via memory leak on premature response close. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Red Hat lists fixing advisory RHSA-2026:69289 with package discovery/discovery-ui-rhel9:1789677459, ansible-automation-platform/automation-portal:1790254963, ansible-automation-platform/automation-portal:1790256405. Affected products named by the advisory: Gatekeeper 3; Migration Toolkit for Containers; Node HealthCheck Operator; OpenShift Lightspeed; and 25 more. Affected products named by the advisory: OpenShift Pipelines; Red Hat 3scale API Management Platform 2; Red Hat Ansible Automation Platform 2; Red Hat build of Apache Camel for Spring Boot 4; and 21 more.
High [CVE-2026-87908] Denial of Service via unbounded part-header accumulation
Denial of Service via unbounded part-header accumulation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1050. Affected product named by the advisory: Red Hat Fuse 7.
High [CVE-2026-89161] Memory corruption vulnerability in pcre2_jit_match
Memory corruption vulnerability in pcre2_jit_match. Red Hat rates this important (CVSS 7.4). Weakness: CWE-1341. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 7 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: bootc; Red Hat package: mariadb10.11; and 3 more.
High [CVE-2026-78807] Security bypass via missing PMKSA validation
Security bypass via missing PMKSA validation. Red Hat rates this important (CVSS 7.1). Weakness: CWE-322. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: wpa_supplicant.
High [CVE-2026-89739] Fix use-after-free in dwc3_gadget_free_endpoints due to race condition
Fix use-after-free in dwc3_gadget_free_endpoints due to race condition. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-90461] Information disclosure via unexpected credential transmission
Information disclosure via unexpected credential transmission. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-201. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; Red Hat OpenStack Platform 18.0.
Medium [CVE-2026-89773] Skip Update HDCP Config In Transition State
Skip Update HDCP Config In Transition State. Red Hat rates this low (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-89771] Fix subbuf resize race with ring buffer readers
Fix subbuf resize race with ring buffer readers. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-89770] don't free integrity payload that doesn't exist
don't free integrity payload that doesn't exist. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-89769] Fix IRQ leak on cpuhp_setup_state error path
Fix IRQ leak on cpuhp_setup_state error path. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-89768] fix user path of nested backing files
fix user path of nested backing files. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-41. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-89767] fix double end_creating on the casefold-mismatch path
fix double end_creating() on the casefold-mismatch path. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1341.
Medium [CVE-2026-89765] Zero-init old itimerval before copy to userspace
Zero-init old itimerval before copy to userspace. Red Hat rates this low (CVSS 5.5). Weakness: CWE-201. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.