Red Hat Linux Security Advisories & CVEs
4426 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-97476] filter RDS_INFO_* getsockopt by caller's netns
filter RDS_INFO_* getsockopt by caller's netns. Red Hat rates this moderate (CVSS 7). Weakness: CWE-201. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
High [CVE-2026-97427] bound pp_dpm_set_pp_table memcpy
bound pp_dpm_set_pp_table() memcpy. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-97429] fix UAF race in destroy_queue_cpsch
fix UAF race in destroy_queue_cpsch. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
High [CVE-2026-97425] fix buffer overflow during vBIOS update
fix buffer overflow during vBIOS update. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-97431] Avoid DPMS-on for phantom stream
Avoid DPMS-on for phantom stream. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
High [CVE-2026-97497] Check bounds for allocate_sdma_queue restore_sdma_id
Check bounds for allocate_sdma_queue restore_sdma_id. Red Hat rates this moderate (CVSS 7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-97494] validate and share PSP fw_pri_buf copies via psp_copy_fw
validate and share PSP fw_pri_buf copies via psp_copy_fw. Red Hat rates this moderate (CVSS 7). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-97495] Check bounds on allocate_doorbell
Check bounds on allocate_doorbell. Red Hat rates this moderate (CVSS 7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-97493] Bound GPIO I2C table entry count from VBIOS
Bound GPIO I2C table entry count from VBIOS. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-97496] Fix OOB memory exposure in get_wave_state
Fix OOB memory exposure in get_wave_state(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-93207] Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody entry
Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel.
High [CVE-2026-93288] wait for rcu grace period before freeing pernet state
wait for rcu grace period before freeing pernet state. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-75887] Unauthenticated path traversal in i18n locale handler
Unauthenticated path traversal in i18n locale handler. Red Hat rates this important (CVSS 7.5). Weakness: CWE-22. Red Hat lists fixing advisory RHSA-2026:70647 with package openshift4/ose-console-rhel9:1789939565, openshift4/ose-console-rhel9:1789904865, openshift4/ose-console-rhel9:1790130905, openshift4/ose-console:1790102793. Affected products named by the advisory: Red Hat OpenShift Container Platform 4.12; Red Hat OpenShift Container Platform 4.17; Red Hat OpenShift Container Platform 4.18; Red Hat OpenShift Container Platform 4.19; and 3 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4.20; Red Hat OpenShift Container Platform 4.21; Red Hat OpenShift Container Platform 4.22.
High [CVE-2026-75886] Unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding
Unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding. Red Hat rates this important (CVSS 7.2). Weakness: CWE-441. Red Hat lists fixing advisory RHSA-2026:70617 with package openshift4/ose-console-rhel9:1789939565, openshift4/ose-console-rhel9:1789904865, openshift4/ose-console-rhel9:1790130905, openshift4/ose-console-rhel9:1790095950. Affected products named by the advisory: Red Hat OpenShift Container Platform 4.17; Red Hat OpenShift Container Platform 4.18; Red Hat OpenShift Container Platform 4.19; Red Hat OpenShift Container Platform 4.20; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4.21; Red Hat OpenShift Container Platform 4.22.
High [CVE-2026-67231] Trust-store whitelist by Issuer+Serial only
Trust-store whitelist by Issuer+Serial only. Red Hat rates this important (CVSS 8.1). Weakness: CWE-295.
High [CVE-2026-67232] RabbitMQ Web-MQTT plugin: Denial of Service via decompression bomb
RabbitMQ Web-MQTT plugin: Denial of Service via decompression bomb. Red Hat rates this important (CVSS 7.5). Weakness: CWE-409. Red Hat lists fixing advisory RHSA-2026:67552 with package rabbitmq-server4-3-main-4.3.6-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-67405] Cross-Site WebSocket Hijacking via missing Origin header validation
Cross-Site WebSocket Hijacking via missing Origin header validation. Red Hat rates this important (CVSS 8.1). Weakness: CWE-1385. Red Hat lists fixing advisory RHSA-2026:67552 with package rabbitmq-server4-3-main-4.3.6-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-66077] Account takeover via stored Cross-Site Scripting in TLS peer-certificate DN
Account takeover via stored Cross-Site Scripting in TLS peer-certificate DN. Red Hat rates this important (CVSS 8.7). Weakness: CWE-79. Red Hat lists fixing advisory RHSA-2026:67552 with package rabbitmq-server4-3-main-4.3.6-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-66079] Denial of Service via AMQP 1.0 array32 parsing
Denial of Service via AMQP 1.0 array32 parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:67552 with package rabbitmq-server4-3-main-4.3.6-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-66070] Cross-Origin Resource Sharing (CORS) misconfiguration allows unauthorized actions
Cross-Origin Resource Sharing (CORS) misconfiguration allows unauthorized actions. Red Hat rates this important (CVSS 8.1). Weakness: CWE-942. Red Hat lists fixing advisory RHSA-2026:67552 with package rabbitmq-server4-3-main-4.3.6-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.