Red Hat Linux Security Advisories & CVEs
3127 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-72208] add bounds check before accessing EA entries
add bounds check before accessing EA entries. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-72270] fix potential memory leak in s3_pci_probe
fix potential memory leak in s3_pci_probe(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-763.
Medium [CVE-2026-72313] Only consider active CRTCs for vblank sync
Only consider active CRTCs for vblank sync. Red Hat rates this low (CVSS 5.5). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72240] Fix reference leak on failed device registration
Fix reference leak on failed device registration. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72336] hold L2CAP conn across debugfs control
hold L2CAP conn across debugfs control. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72260] Check runtime resume during probe
Check runtime resume during probe. Red Hat rates this low (CVSS 5.5). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-72282] Move kvm_io_bus_get_dev locking responsibilities to callers
Move kvm_io_bus_get_dev() locking responsibilities to callers. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72235] retrieve ethhdr after potential skb realloc on RX
retrieve ethhdr after potential skb realloc on RX. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-72150] fix uninitialized xprt_create_args structure
fix uninitialized xprt_create_args structure. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-824. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72335] Fix adv monitor add failure cleanup
Fix adv monitor add failure cleanup. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72164] avoid moving extents to occupied clusters
avoid moving extents to occupied clusters. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367.
Medium [CVE-2026-72181] Fix CPUMASK_OFFSTACK memory corruption
Fix CPUMASK_OFFSTACK memory corruption. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-72229] clean untagged VLAN on netdev registration failure
clean untagged VLAN on netdev registration failure. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72193] cap RESTART_TABLE free-chain walker at rt->used
cap RESTART_TABLE free-chain walker at rt->used. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-835.
Medium [CVE-2026-72241] Fix potential buffer overread
Fix potential buffer overread. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-72161] add journal NULL check in ocfs2_checkpoint_inode
add journal NULL check in ocfs2_checkpoint_inode(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-72147] Reject devices without driver data
Reject devices without driver data. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-72250] guard mac_header adjustment after IPv6 defrag
guard mac_header adjustment after IPv6 defrag. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-823. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72212] fix incorrect altmap passing in error path
fix incorrect altmap passing in error path. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-72204] centalize $INDEX_ROOT header validation
centalize $INDEX_ROOT header validation. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1286.