Red Hat Linux Security Advisories & CVEs
4891 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-42294] Denial of Service via large request body to Webhook Interceptor
Denial of Service via large request body to Webhook Interceptor. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
High [CVE-2026-42297] Unauthorized ConfigMap manipulation due to missing authorization
Unauthorized ConfigMap manipulation due to missing authorization. Red Hat rates this important (CVSS 8.3). Weakness: CWE-425. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
High [CVE-2026-4890] NSEC bitmap parsing infinite loop
NSEC bitmap parsing infinite loop. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Affected package(s): dnsmasq. Resolved in Red Hat advisory RHSA-2026:20589 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat OpenShift Container Platform 4.19.
High [CVE-2026-4891] RRSIG rdlen underflow leading to heap OOB read
RRSIG rdlen underflow leading to heap OOB read. Red Hat rates this important (CVSS 7.5). Weakness: CWE-125. Affected package(s): dnsmasq. Resolved in Red Hat advisory RHSA-2026:20589 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux 6; and 2 more.
High [CVE-2026-4892] DHCPv6 CLID buffer overflow in helper process
DHCPv6 CLID buffer overflow in helper process. Red Hat rates this important (CVSS 8.8). Weakness: CWE-122. Affected package(s): dnsmasq. Resolved in Red Hat advisory RHSA-2026:20589 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux 6; and 2 more.
High [CVE-2026-5172] extract_addresses() OOB read via malformed rdlen
extract_addresses() OOB read via malformed rdlen. Red Hat rates this important (CVSS 7.5). Weakness: CWE-125. Affected package(s): dnsmasq. Resolved in Red Hat advisory RHSA-2026:19158 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-42203] Arbitrary code execution via unsandboxed prompt templates
Arbitrary code execution via unsandboxed prompt templates. Red Hat rates this important (CVSS 8.8). Weakness: CWE-94. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Ansible Automation Platform 2.
High [CVE-2026-42271] Authenticated command execution via MCP stdio test endpoints
Authenticated command execution via MCP stdio test endpoints. Red Hat rates this important (CVSS 8.8). Weakness: CWE-78. Affected package(s): rhoai/odh-llama-stack-core-rhel9:1781826406, rhoai/odh-llama-stack-core-rhel9:1782310008, rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9:1781622627. Resolved in Red Hat advisory RHSA-2026:28960 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift AI 2.25; Red Hat OpenShift AI 3.3; Red Hat OpenShift AI 3.4.
High [CVE-2026-42264] Prototype pollution allows information disclosure and request manipulation
Prototype pollution allows information disclosure and request manipulation. Red Hat rates this important (CVSS 7.4). Weakness: CWE-915. Affected package(s): openshift-service-mesh/kiali-ossmc-rhel9:1782201851, advanced-cluster-security/rhacs-main-rhel8:1779371594, advanced-cluster-security/rhacs-main-rhel8:1779293013, openshift-service-mesh/kiali-rhel9:1782201812. Resolved in Red Hat advisory RHSA-2026:20889 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Advanced Cluster Security for Kubernetes 4.10; Red Hat Advanced Cluster Security for Kubernetes 4.11; Red Hat Advanced Cluster Security for Kubernetes 4.9; Red Hat OpenShift Service Mesh 3.1; and 26 more.
High [CVE-2026-43330] caam - fix overflow on long hmac keys
caam - fix overflow on long hmac keys. Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-125. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:27288 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
High [CVE-2026-43303] clear page->private in free_pages_prepare()
clear page->private in free_pages_prepare(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-909. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:26462 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 9.
High [CVE-2026-43329] strictly check for maximum number of actions
strictly check for maximum number of actions. Red Hat rates this important (CVSS 7.8). Weakness: CWE-770. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:34094 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 17 more.
High [CVE-2026-43322] Fix UAF in le_read_features_complete
Fix UAF in le_read_features_complete. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:23329 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
High [CVE-2026-43341] prevent schema length wraparound in trace fill
prevent schema length wraparound in trace fill. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:33215 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
High [CVE-2026-43414] Completely fix fcport double free
Completely fix fcport double free. Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-1341. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:34094 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2026-42880] Information disclosure of Kubernetes Secret data via Server-Side Apply dry-run mechanism
Information disclosure of Kubernetes Secret data via Server-Side Apply dry-run mechanism. Red Hat rates this important (CVSS 7.7). Weakness: CWE-201. Affected package(s): openshift-gitops. Resolved in Red Hat advisory RHSA-2026:20943 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift GitOps 1.19; Red Hat OpenShift GitOps 1.20; Red Hat Openshift Data Foundation 4.
High [CVE-2026-39820] Go net/mail: Denial of Service via crafted email inputs
Go net/mail: Denial of Service via crafted email inputs. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. Affected package(s): openshift-service-mesh/istio-proxyv2-rhel9:1782310747, openshift-service-mesh/istio-proxyv2-rhel9:1782303211, rhdh/rhdh-rhel9-operator:1782767215, openshift-service-mesh/istio-cni-rhel9:1782222217, openshift-service-mesh/istio-pilot-rhel9:1782223341, openshift-service-mesh/istio-pilot-rhel9:1782223138. Resolved in Red Hat advisory RHSA-2026:33120 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Logging Subsystem for Red Hat OpenShift 6.4; Red Hat Advanced Cluster Security for Kubernetes 4.10; Red Hat Advanced Cluster Security for Kubernetes 4.9; Red Hat Developer Hub 1.10; and 91 more.
High [CVE-2026-33811] Go net package: Denial of Service via long CNAME response in LookupCNAME
Go net package: Denial of Service via long CNAME response in LookupCNAME. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1341. Affected package(s): golang-github-openprinting-ipp-usb, opentelemetry-collector, golang1, openshift-service-mesh/istio-proxyv2-rhel9:1782310747, openshift-service-mesh/istio-proxyv2-rhel9:1782303211, rhdh/rhdh-rhel9-operator:1782767215. Resolved in Red Hat advisory RHSA-2026:23262 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: RHEM 1.0 for RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux AppStream (v. 9); and 124 more.
High [CVE-2026-42499] Denial of Service via pathological email address parsing
Denial of Service via pathological email address parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1046. Affected package(s): openshift-service-mesh/istio-proxyv2-rhel9:1782310747, openshift-service-mesh/istio-proxyv2-rhel9:1782303211, rhdh/rhdh-rhel9-operator:1782767215, openshift-service-mesh/istio-cni-rhel9:1782222217, openshift-service-mesh/istio-pilot-rhel9:1782223341, openshift-service-mesh/istio-pilot-rhel9:1782223138. Resolved in Red Hat advisory RHSA-2026:33120 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Logging Subsystem for Red Hat OpenShift 6.4; Red Hat Advanced Cluster Security for Kubernetes 4.10; Red Hat Advanced Cluster Security for Kubernetes 4.9; Red Hat Developer Hub 1.10; and 90 more.
High [CVE-2026-33814] Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. Affected package(s): golang1, cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9:1782839981, openshift-service-mesh/istio-cni-rhel9:1782222217, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519, openshift-service-mesh/istio-pilot-rhel9:1782223138, openshift-service-mesh/istio-pilot-rhel9:1782222366. Resolved in Red Hat advisory RHSA-2026:23262 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Hardened Images; Red Hat Openshift Data Foundation 4.22; Red Hat OpenShift Service Mesh 3.1; Red Hat OpenShift Service Mesh 3.2; and 41 more.