Red Hat Linux Security Advisories & CVEs
4891 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-41240] Cross-Site Scripting (XSS) via inconsistent tag sanitization
Cross-Site Scripting (XSS) via inconsistent tag sanitization. Red Hat rates this moderate (CVSS 8.1). Weakness: CWE-79. Affected package(s): rhoai/odh-mod-arch-model-registry-rhel9:1780467147, devspaces/openvsx-rhel9:1779528224, cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0, devspaces/code-rhel9:1779814592, rhoai/odh-dashboard-rhel9:1780467029, automation-platform-ui. Resolved in Red Hat advisory RHSA-2026:27872 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-34003] X.Org X server: Information exposure and denial of service via out-of-bounds memory access
X.Org X server: Information exposure and denial of service via out-of-bounds memory access. Red Hat rates this important (CVSS 7.8). Weakness: CWE-125. Affected package(s): tigervnc, xorg-x11-server-Xwayland, xorg-x11-server. Resolved in Red Hat advisory RHSA-2026:24341 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; and 11 more.
High [CVE-2026-34001] X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption
X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption. Red Hat rates this important (CVSS 7.8). Weakness: CWE-825. Affected package(s): tigervnc, xorg-x11-server-Xwayland, xorg-x11-server. Resolved in Red Hat advisory RHSA-2026:24341 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; and 11 more.
High [CVE-2026-33999] X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling
X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling. Red Hat rates this important (CVSS 7.8). Weakness: CWE-191. Affected package(s): tigervnc, xorg-x11-server-Xwayland, xorg-x11-server. Resolved in Red Hat advisory RHSA-2026:24341 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; and 11 more.
High [CVE-2026-41989] Denial of Service and buffer overflow via crafted ECDH ciphertext
Denial of Service and buffer overflow via crafted ECDH ciphertext. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-131. Affected package(s): libgcrypt-main. Resolved in Red Hat advisory RHSA-2026:8466 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-41196] Luanti (Minetest): Arbitrary code execution and full filesystem access via malicious mod sandbox escape
Luanti (Minetest): Arbitrary code execution and full filesystem access via malicious mod sandbox escape. Red Hat rates this important (CVSS 8.2). Weakness: CWE-749. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-31532] fix ro->uniq use-after-free in raw_rcv()
fix ro->uniq use-after-free in raw_rcv(). Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-366. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:25095 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 7.
High [CVE-2026-41326] Arbitrary file write inside guest image via CopyFile policy
Arbitrary file write inside guest image via CopyFile policy. Red Hat rates this important (CVSS 8.8). Weakness: CWE-1220. Affected package(s): rhcos. Resolved in Red Hat advisory RHSA-2026:25200 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift Container Platform 4.19; Confidential Compute Attestation.
High [CVE-2026-41651] race condition vulnerability leads to arbitrary package installation as root
race condition vulnerability leads to arbitrary package installation as root. Red Hat rates this important (CVSS 8.8). Weakness: CWE-367. Affected package(s): PackageKit. Resolved in Red Hat advisory RHSA-2026:11504 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-40542] Authentication bypass due to missing mutual authentication verification
Authentication bypass due to missing mutual authentication verification. Red Hat rates this important (CVSS 7.3). Weakness: CWE-325. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: OpenShift Developer Tools and Services 4.12; OpenShift Developer Tools and Services 4.15; OpenShift Developer Tools and Services 4.16; OpenShift Developer Tools and Services 4.17; and 7 more.
High [CVE-2026-22754] Authorization bypass due to incorrect servlet path matching
Authorization bypass due to incorrect servlet path matching. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-22747] User impersonation via malformed X.509 certificate Common Name (CN) values
User impersonation via malformed X.509 certificate Common Name (CN) values. Red Hat rates this important (CVSS 8.1). Weakness: CWE-295. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-31488] Do not skip unrelated mode changes in DSC validation
Do not skip unrelated mode changes in DSC validation. Red Hat rates this important (CVSS 7.8). Weakness: CWE-1288. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:27354 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; and 2 more.
High [CVE-2026-31508] Avoid releasing netdev before teardown completes
Avoid releasing netdev before teardown completes. Red Hat rates this moderate (CVSS 7). Weakness: CWE-367. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:25217 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-31474] fix tx.buf use-after-free in isotp_sendmsg()
fix tx.buf use-after-free in isotp_sendmsg(). Red Hat rates this important (CVSS 7.8). Weakness: CWE-364. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:27288 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.
High [CVE-2026-31431] algif_aead - Revert to operating out-of-place
algif_aead - Revert to operating out-of-place. Red Hat rates this important (CVSS 7.8). Weakness: CWE-1288. Affected package(s): kernel, rhcos, kernel-rt, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:13729 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat OpenShift Container Platform 4.12; Red Hat OpenShift Container Platform 4.13; Red Hat OpenShift Container Platform 4.14; and 63 more.
High [CVE-2026-40575] Authentication bypass due to spoofed X-Forwarded-Uri header
Authentication bypass due to spoofed X-Forwarded-Uri header. Red Hat rates this important (CVSS 8.7). Weakness: CWE-290. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Ceph Storage 9.
High [CVE-2026-40938] Arbitrary code execution and secret exfiltration via malicious git commands
Arbitrary code execution and secret exfiltration via malicious git commands. Red Hat rates this important (CVSS 8.5). Weakness: CWE-88. Affected package(s): openshift-pipelines/pipelines-rhel9-operator:1780645012, serve-tkn-cli, openshift-builds/openshift-builds-image-processing-rhel9:1778682932, openshift-builds/openshift-builds-image-processing-rhel9:1780373835, openshift-builds/openshift-builds-git-cloner-rhel9:1780374151, openshift-builds/openshift-builds-image-bundler-rhel9:1780373867. Resolved in Red Hat advisory RHSA-2026:24484 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift Builds 1.7.4; Red Hat OpenShift Builds 1.8.0; Red Hat OpenShift Pipelines 1.21; Red Hat OpenShift Builds 1.7.1; and 2 more.
High [CVE-2026-40906] Critical data compromise and loss via SQL injection
Critical data compromise and loss via SQL injection. Red Hat rates this important (CVSS 8.8). Weakness: CWE-89. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-22016] Enhance Path Factories Redux (Oracle CPU 2026-04)
Enhance Path Factories Redux (Oracle CPU 2026-04). Red Hat rates this important (CVSS 7.5). Weakness: CWE-611. Affected package(s): java. Resolved in Red Hat advisory RHSA-2026:11829 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Build of OpenJDK 17.0.19; Red Hat Build of OpenJDK 17.0.9; Red Hat Build of OpenJDK 21.0.11; Red Hat Build of OpenJDK 25.0.3; and 20 more.