Red Hat Linux Security Advisories & CVEs
10918 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-95291] UI misrepresentation in SecurityIndicators
UI misrepresentation in SecurityIndicators. Red Hat rates this important (CVSS 4.3). Weakness: CWE-451.
Medium [CVE-2026-102623] virt-controller nil-pointer dereference via malformed ephemeral volume
virt-controller nil-pointer dereference via malformed ephemeral volume. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476. Affected product named by the advisory: Red Hat OpenShift Virtualization 4.
Medium [CVE-2026-102633] Denial of Service via integer overflow in expat_realloc
Denial of Service via integer overflow in expat_realloc. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 9 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat package: expat; and 5 more.
Medium [CVE-2026-97711] Cross-Site Scripting via unescaped script-closing tags in serialized functions
Cross-Site Scripting via unescaped script-closing tags in serialized functions. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-79. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-84784] Denial of Service via unbounded QUIC connection identifier backlog
Denial of Service via unbounded QUIC connection identifier backlog. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-84783] Denial of Service via race condition in certificate extension caching
Denial of Service via race condition in certificate extension caching. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:59641 with package openssl3-main-3.5.8-1.hum1, openssl-main-3.5.8-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-77696] Private key recovery via SM2 timing side-channel
Private key recovery via SM2 timing side-channel. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-208. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-75806] Denial of Service via undersized DTLS record
Denial of Service via undersized DTLS record. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1284. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-75805] Denial of Service via crafted CMP certificate revocation response
Denial of Service via crafted CMP certificate revocation response. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-476. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-72897] Denial of Service via out-of-bounds write during TLS context switch
Denial of Service via out-of-bounds write during TLS context switch. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-97688] Denial of Service via infinite loop during chunked Deflate decoding
Denial of Service via infinite loop during chunked Deflate decoding. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-835. Red Hat lists fixing advisory RHSA-2026:69612 with package python-urllib3-main-2.8.0-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-54875] information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V
information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-208. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-54873] Denial of Service via excessive QUIC packet buffer retention
Denial of Service via excessive QUIC packet buffer retention. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-54872] Private key recovery via timing side-channel in generic elliptic curve operations
Private key recovery via timing side-channel in generic elliptic curve operations. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-208. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-42772] Denial of Service via inefficient QUIC stream reassembly
Denial of Service via inefficient QUIC stream reassembly. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:74162 with package openssl-main-3.5.9-0.1.hum1, openssl3-main-3.5.9-0.1.hum1. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 15 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat JBoss Core Services; and 11 more.
Medium [CVE-2026-102598] Denial of Service via safe_join Windows special device paths
Denial of Service via safe_join() Windows special device paths. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-66.
Medium [CVE-2026-95391] Use After Free in Wireshark
Use After Free in Wireshark. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-416.
Medium [CVE-2026-95386] Denial of Service via infinite loop in TTL file parser
Denial of Service via infinite loop in TTL file parser. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-835.
Medium [CVE-2026-95390] Denial of Service via crafted PEAK CAN TRC file
Denial of Service via crafted PEAK CAN TRC file. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-95395] Denial of Service via memory leak in IEEE C37.118 Synchrophasor dissector
Denial of Service via memory leak in IEEE C37.118 Synchrophasor dissector. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: wireshark.