Red Hat Linux Security Advisories & CVEs
11870 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-80930] disable IRQ on wait timeout
disable IRQ on wait timeout. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-80928] fix cred UAF in smack_file_send_sigiotask
fix cred UAF in smack_file_send_sigiotask(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-80927] Check the return value of tk_get_aux_ts64 in __do_adjtimex
Check the return value of tk_get_aux_ts64 in __do_adjtimex(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel-rt.
Medium [CVE-2026-18495] Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption. The flaw arises from an integer truncation during strip length calculation, resulting in an undersized buffer. Exploitation requires local access and user interaction, such as opening a malicious file. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H). Weakness: CWE-122. Affected Red Hat products: Red Hat Hardened Images. Under investigation: Red Hat Ceph Storage 4; Red Hat Ceph Storage 6; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat fixing advisory: RHSA-2026:53467.
Medium [CVE-2026-87910] Python tarfile module: Security filter bypass allows arbitrary file write
Python tarfile module: Security filter bypass allows arbitrary file write. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-252. Red Hat lists fixing advisory RHSA-2026:67575 with package python3-14-main-3.14.7-1.2.hum1, python3-13-main-3.13.15-1.2.hum1, python3-11-main-3.11.16-1.3.hum1, python3-12-main-3.12.14-1.2.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-89090] Amazon AWS SDK for Go v2: Denial of Service via crafted event stream header
Amazon AWS SDK for Go v2: Denial of Service via crafted event stream header. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-248. Affected products named by the advisory: AWS Load Balancer Operator; cert-manager Operator for Red Hat OpenShift; Compliance Operator; Confidential Compute Attestation; and 42 more. Affected products named by the advisory: Cryostat 4; Custom Metric Autoscaler operator for Red Hat Openshift; DPU kit for NVIDIA; Exploit Intelligence; and 38 more.
Medium [CVE-2026-89329] Local Denial of Service via Blocking IPC Send Operations
Local Denial of Service via Blocking IPC Send Operations. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-1322. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: device-mapper-multipath.
Medium [CVE-2026-89258] Information disclosure via symlink confinement bypass
Information disclosure via symlink confinement bypass. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-59. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat OpenShift GitOps; Red Hat OpenStack Platform 18.0; Red Hat package: grafana.
Medium [CVE-2026-87859] Log Injection via unescaped double quote in log fields
Log Injection via unescaped double quote in log fields. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-117. Affected products named by the advisory: Cryostat 4; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Fuse 7; and 6 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Openshift Data Foundation 4; Red Hat package: linux-sgx; Red Hat package: nodejs22; and 2 more.
Medium [CVE-2026-89158] Out-of-bounds write via integer overflow on 32-bit platforms
Out-of-bounds write via integer overflow on 32-bit platforms. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 7 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: bootc; Red Hat package: mariadb10.11; and 3 more.
Medium [CVE-2026-89157] Out-of-bounds write via large pattern input
Out-of-bounds write via large pattern input. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 5 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: mariadb10.11; Red Hat package: mariadb11.8; Red Hat package: mingw-pcre2; and 1 more.
Medium [CVE-2026-89092] nscd stack overflow leads to degraded DNS resolution
nscd stack overflow leads to degraded DNS resolution. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-120. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-77159] Unsafe chown in qemuTPMEmulatorPrepareHost allows arbitrary file ownership change via symlink
Unsafe chown in qemuTPMEmulatorPrepareHost() allows arbitrary file ownership change via symlink. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-61. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libvirt.
Medium [CVE-2026-81005] Fix NULL pointer dereference after failed registration
Fix NULL pointer dereference after failed registration. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-476.
Low [CVE-2026-89162] Information disclosure via pcre2_serialize_encode
Information disclosure via pcre2_serialize_encode. Red Hat rates this low (CVSS 2.9). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 2 more. Affected products named by the advisory: Red Hat package: mariadb10.11; Red Hat package: mariadb11.8.
Low [CVE-2026-89160] Denial of Service via out-of-bounds read during invalid UTF matching
Denial of Service via out-of-bounds read during invalid UTF matching. Red Hat rates this low (CVSS 3.7). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4.
Low [CVE-2026-89156] Out-of-bounds read via invalid UTF data during JIT fallback
Out-of-bounds read via invalid UTF data during JIT fallback. Red Hat rates this low (CVSS 2.9). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 7 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: bootc; Red Hat package: mariadb10.11; and 3 more.
Critical [CVE-2026-88011] Identity spoofing via dot-form header alias
Identity spoofing via dot-form header alias. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-444. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
Critical [CVE-2026-88008] Incorrect authorization due to HTTP/2 protocol confusion
Incorrect authorization due to HTTP/2 protocol confusion. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-358. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
Critical [CVE-2026-88007] Traefik HTTP/3 Backend NTLM Connection Reuse
Traefik HTTP/3 Backend NTLM Connection Reuse. Red Hat rates this critical (CVSS 9.1). Weakness: CWE-863. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.