Red Hat Linux Security Advisories & CVEs
4891 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-4151] Remote Code Execution via ANI File Parsing Integer Overflow
Remote Code Execution via ANI File Parsing Integer Overflow. Red Hat rates this important (CVSS 7.8). Weakness: CWE-190. Affected package(s): gimp. Resolved in Red Hat advisory RHSA-2026:16484 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
High [CVE-2026-4150] Arbitrary code execution via specially crafted PSD file
Arbitrary code execution via specially crafted PSD file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-190. Affected package(s): gimp, gimp:2.8. Resolved in Red Hat advisory RHSA-2026:17533 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 9 more.
High [CVE-2026-58379] Heap buffer overflow in read_channel_data()
Heap buffer overflow in read_channel_data(). Red Hat rates this important (CVSS 7.3). Weakness: CWE-122. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
High [CVE-2026-5483] ODH Dashboard Kubernetes Service Account Exposure
ODH Dashboard Kubernetes Service Account Exposure. Red Hat rates this important (CVSS 8.5). Weakness: CWE-201. Affected package(s): rhoai/odh-dashboard-rhel8:1775230902, rhoai/odh-dashboard-rhel9:1775239958, rhoai/odh-dashboard-rhel9:1775234711, rhoai/odh-dashboard-rhel9:1775523049. Resolved in Red Hat advisory RHSA-2026:7404 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift AI 2.16; Red Hat OpenShift AI 2.25; Red Hat OpenShift AI 3.2; Red Hat OpenShift AI 3.3.
High [CVE-2026-40217] Arbitrary Code Execution via bytecode rewriting
Arbitrary Code Execution via bytecode rewriting. Red Hat rates this important (CVSS 8.8). Weakness: CWE-94. Affected package(s): rhoai/odh-llama-stack-core-rhel9:1782310008, ansible-automation-platform. Resolved in Red Hat advisory RHSA-2026:24866 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6; Red Hat OpenShift AI 3.3.
High [CVE-2026-39304] Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion
Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Fuse 7.
High [CVE-2026-40200] musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort
musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort. Red Hat rates this important (CVSS 7.8). Weakness: CWE-190. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-34486] Missing Encryption of Sensitive Data due to EncryptInterceptor bypass
Missing Encryption of Sensitive Data due to EncryptInterceptor bypass. Red Hat rates this important (CVSS 7.5). Weakness: CWE-807. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; and 8 more.
High [CVE-2026-32990] Improper Input Validation vulnerability due to incomplete fix
Improper Input Validation vulnerability due to incomplete fix. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-184. Affected package(s): tomcat, jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:12195 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
High [CVE-2026-29146] Information disclosure via Padding Oracle vulnerability in EncryptInterceptor
Information disclosure via Padding Oracle vulnerability in EncryptInterceptor. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1240. Affected package(s): jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:20405 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; and 10 more.
High [CVE-2026-34734] HDF5 h5dump: Arbitrary code execution via a crafted HDF5 file
HDF5 h5dump: Arbitrary code execution via a crafted HDF5 file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-34971] Sandbox escape due to miscompiled heap access on aarch64
Sandbox escape due to miscompiled heap access on aarch64. Red Hat rates this important (CVSS 8.5). Weakness: CWE-125. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Connectivity Link 1.
High [CVE-2026-39983] Command injection via CRLF sequences in file path parameters
Command injection via CRLF sequences in file path parameters. Red Hat rates this important (CVSS 8.6). Weakness: CWE-93. Affected package(s): rhdh/rhdh-hub-rhel9:1777903262, rhdh/rhdh-hub-rhel9:1776784286. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Developer Hub 1.8; Red Hat Developer Hub 1.9; Red Hat OpenShift Container Platform 4.
High [CVE-2026-35205] Arbitrary code execution due to insufficient plugin provenance verification
Arbitrary code execution due to insufficient plugin provenance verification. Red Hat rates this important (CVSS 8). Weakness: CWE-347. Affected package(s): helm-cli. Resolved in Red Hat advisory RHSA-2026:26441 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-35204] Arbitrary file write via specially crafted plugin
Arbitrary file write via specially crafted plugin. Red Hat rates this important (CVSS 8.2). Weakness: CWE-22. Affected package(s): helm-cli. Resolved in Red Hat advisory RHSA-2026:26441 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2025-62718] Server-Side Request Forgery and proxy bypass due to improper hostname normalization
Server-Side Request Forgery and proxy bypass due to improper hostname normalization. Red Hat rates this important (CVSS 7). Weakness: CWE-1289. Affected package(s): openshift-service-mesh/kiali-rhel9:1776149682, openshift-service-mesh/kiali-ossmc-rhel9:1776151134, rhoai/odh-mod-arch-model-registry-rhel9:1780467147, devspaces/dashboard-rhel9:1776795511, openshift-service-mesh/kiali-ossmc-rhel8:1776202125, rhoai/odh-mod-arch-gen-ai-rhel9:1778473763. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Advanced Cluster Security for Kubernetes 4.10; and 36 more.
High [CVE-2026-4660] Arbitrary file reads via maliciously crafted URL
Arbitrary file reads via maliciously crafted URL. Red Hat rates this important (CVSS 7.5). Weakness: CWE-22. Affected package(s): rhtas/client-server-rhel9:1780399582. Resolved in Red Hat advisory RHSA-2026:24478 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.3; Red Hat OpenShift Container Platform 4.
High [CVE-2026-40024] Arbitrary code execution via path traversal in tsk_recover
Arbitrary code execution via path traversal in tsk_recover. Red Hat rates this important (CVSS 7.9). Weakness: CWE-22. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-5858] Arbitrary code execution via heap buffer overflow in WebML
Arbitrary code execution via heap buffer overflow in WebML. Red Hat rates this important (CVSS 8.8). Weakness: CWE-131. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-39892] Buffer overflow via non-contiguous buffer in API
Buffer overflow via non-contiguous buffer in API. Red Hat rates this important (CVSS 7.3). Weakness: CWE-131. Affected package(s): ansible-automation-platform, quay/quay-rhel8:1779811473, quay/quay-rhel8:1779689392, ansible-automation-platform-tech-preview/metrics-service-rhel9:1779760844, automation-controller, python3.12-cryptography. Resolved in Red Hat advisory RHSA-2026:23361 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat AI Inference Server 3.3; and 20 more.