Red Hat Linux Security Advisories & CVEs
4891 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-43110] validate bsscfg indices in IF events
validate bsscfg indices in IF events. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-1285. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:26462 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
High [CVE-2026-43112] fix out-of-bounds read in cifs_sanitize_prepath
fix out-of-bounds read in cifs_sanitize_prepath. Red Hat rates this important (CVSS 8.1). Weakness: CWE-125. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:34911 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift Container Platform 4.22; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; and 14 more.
High [CVE-2026-43260] Fix RSS context delete logic
Fix RSS context delete logic. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-772. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:27288 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2026-43178] fix possible double mmput() in do_procmap_query()
fix possible double mmput() in do_procmap_query(). Red Hat rates this important (CVSS 7). Weakness: CWE-1341. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-43198] fix potential race in tcp_v6_syn_recv_sock()
fix potential race in tcp_v6_syn_recv_sock(). Red Hat rates this important (CVSS 7). Weakness: CWE-821. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:34094 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 7 more.
High [CVE-2026-43114] don't return non-matching entry on expiry
don't return non-matching entry on expiry. Red Hat rates this important (CVSS 8.1). Weakness: CWE-480. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat OpenShift Container Platform 4.22; and 3 more.
High [CVE-2026-43077] algif_aead - Fix minimum RX size check for decryption
algif_aead - Fix minimum RX size check for decryption. Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-131. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:13936 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2026-43190] check remaining length before reading optlen
check remaining length before reading optlen. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-125. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:26462 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
High [CVE-2026-43133] Always use vmcb01 in VMLOAD/VMSAVE emulation
Always use vmcb01 in VMLOAD/VMSAVE emulation. Red Hat rates this important (CVSS 7.9). Weakness: CWE-628. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4.
High [CVE-2026-43128] Fix double dma_buf_unpin in failure path
Fix double dma_buf_unpin in failure path. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:19569 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 9.
High [CVE-2026-43158] fix freemap adjustments when adding xattrs to leaf blocks
fix freemap adjustments when adding xattrs to leaf blocks. Red Hat rates this moderate (CVSS 7). Weakness: CWE-617. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:26462 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
High [CVE-2026-43125] validate length in dlm_search_rsb_tree
validate length in dlm_search_rsb_tree. Red Hat rates this important (CVSS 7). Weakness: CWE-130. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:25120 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; and 4 more.
High [CVE-2026-28780] Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow
Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow. Red Hat rates this important (CVSS 8.1). Weakness: CWE-787. Affected package(s): httpd, httpd:2.4, jbcs-httpd24-httpd. Resolved in Red Hat advisory RHSA-2026:27200 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: JBoss Core Services for RHEL 8; JBoss Core Services on RHEL 7; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-40110] Cross-Origin Resource Sharing (CORS) bypass via improper Origin header validation
Cross-Origin Resource Sharing (CORS) bypass via improper Origin header validation. Red Hat rates this important (CVSS 7.1). Weakness: CWE-625. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat Migration Toolkit for Applications 8.2.
High [CVE-2026-35579] Authentication bypass allows unauthorized access to TSIG-protected functionalities
Authentication bypass allows unauthorized access to TSIG-protected functionalities. Red Hat rates this important (CVSS 7.5). Weakness: CWE-303. Affected package(s): rhacm2/lighthouse-coredns-rhel9:1780204249. Resolved in Red Hat advisory RHSA-2026:25127 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.14.
High [CVE-2026-35397] Unauthorized File Access via Path Traversal Vulnerability
Unauthorized File Access via Path Traversal Vulnerability. Red Hat rates this important (CVSS 7.1). Weakness: CWE-22. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat Migration Toolkit for Applications 8.2; Red Hat OpenShift AI 3.4.
High [CVE-2026-32936] Denial of Service via oversized DNS-over-HTTPS GET requests
Denial of Service via oversized DNS-over-HTTPS GET requests. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-1284. Affected package(s): rhacm2/lighthouse-agent-rhel9:1780204232, rhacm2/lighthouse-coredns-rhel9:1780204249. Resolved in Red Hat advisory RHSA-2026:25127 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-25243] RESTORE invalid memory access may allow remote code execution
RESTORE invalid memory access may allow remote code execution. Red Hat rates this important (CVSS 8.8). Weakness: CWE-122. Affected package(s): redis, valkey, redis:6, redis:7. Resolved in Red Hat advisory RHSA-2026:26540 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 7 more.
High [CVE-2026-23631] Remote code execution via use-after-free in Lua scripting
Remote code execution via use-after-free in Lua scripting. Red Hat rates this important (CVSS 8.8). Weakness: CWE-416. Affected package(s): redis:7, valkey. Resolved in Red Hat advisory RHSA-2026:26540 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Hardened Images.
High [CVE-2026-23479] use-after-free in unblock client flow may allow remote code execution
use-after-free in unblock client flow may allow remote code execution. Red Hat rates this important (CVSS 7.5). Weakness: CWE-416. Affected package(s): redis:7, valkey. Resolved in Red Hat advisory RHSA-2026:26540 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Hardened Images.