Red Hat Linux Security Advisories & CVEs
4888 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-31935] Denial of Service via HTTP2 continuation frame flooding
Denial of Service via HTTP2 continuation frame flooding. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-31934] Denial of Service via quadratic complexity in URL search of MIME-encoded SMTP messages
Denial of Service via quadratic complexity in URL search of MIME-encoded SMTP messages. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-31933] Denial of Service due to specially crafted network traffic
Denial of Service due to specially crafted network traffic. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-31932] Denial of Service due to inefficiency in KRB5 buffering
Denial of Service due to inefficiency in KRB5 buffering. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-31931] Denial of Service via 'tls.alpn' rule keyword
Denial of Service via 'tls.alpn' rule keyword. Red Hat rates this important (CVSS 7.5). Weakness: CWE-476. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3872] Information disclosure due to redirect_uri validation bypass
Information disclosure due to redirect_uri validation bypass. Red Hat rates this important (CVSS 7.3). Weakness: CWE-601. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.11, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-operator-bundle:26.2.15, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:6478 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-4282] Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw
Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw. Red Hat rates this important (CVSS 7.4). Weakness: CWE-653. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.11, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-operator-bundle:26.2.15, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:6478 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-4634] Denial of Service via excessive processing of OpenID Connect scope parameters
Denial of Service via excessive processing of OpenID Connect scope parameters. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1050. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.11, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-operator-bundle:26.2.15, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:6478 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4; RHEL-8 based Middleware Containers; Red Hat Single Sign-On 7.6 for RHEL 8; and 2 more.
High [CVE-2026-4636] UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.
UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.. Red Hat rates this important (CVSS 8.1). Weakness: CWE-551. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.11, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-operator-bundle:26.2.15, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:6478 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-34545] Remote code execution via crafted EXR files
Remote code execution via crafted EXR files. Red Hat rates this important (CVSS 8.8). Weakness: CWE-1284. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-27489] Information Disclosure via Path Traversal Vulnerability
Information Disclosure via Path Traversal Vulnerability. Red Hat rates this important (CVSS 8.6). Weakness: CWE-22. Affected package(s): rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:1780078429, rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1780417775, rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1780078388, rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:1780069222, rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1780078632, rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1780078312. Resolved in Red Hat advisory RHSA-2026:24977 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift AI 2.25; Red Hat OpenShift AI (RHOAI).
High [CVE-2026-35092] Denial of Service via integer overflow in join message validation
Denial of Service via integer overflow in join message validation. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-190. Affected package(s): corosync. Resolved in Red Hat advisory RHSA-2026:19043 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-35091] Denial of Service and information disclosure via crafted UDP packet
Denial of Service and information disclosure via crafted UDP packet. Red Hat rates this moderate (CVSS 8.2). Weakness: CWE-253. Affected package(s): corosync. Resolved in Red Hat advisory RHSA-2026:19043 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-23401] Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling
Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling. Red Hat rates this important (CVSS 8.1). Weakness: CWE-416. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:13936 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.6 Telecommunications Update Service; Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions; and 6 more.
High [CVE-2026-35093] Unauthorized code execution and information disclosure through Lua bytecode plugins
Unauthorized code execution and information disclosure through Lua bytecode plugins. Red Hat rates this important (CVSS 8.8). Weakness: CWE-94. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-34872] Mbed TLS and TF-PSA-Crypto: Shared secret manipulation via improper FFDH input validation
Mbed TLS and TF-PSA-Crypto: Shared secret manipulation via improper FFDH input validation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1287. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-4800] Arbitrary code execution via untrusted input in template imports
Arbitrary code execution via untrusted input in template imports. Red Hat rates this important (CVSS 8.1). Weakness: CWE-94. Affected package(s): odf4/ocs-client-console-rhel9:1778050558, odf4/mcg-core-rhel9:1776403991, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, odf4/ocs-client-rhel9-operator:1778049818, odf4/odf-cloudnative-pg-rhel9-operator:1776406131, satellite/iop-remediations-rhel9:1776194798. Resolved in Red Hat advisory RHSA-2026:29795 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6 for RHEL 9; Cryostat 4 on RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux High Availability EUS (v. 10.0); and 90 more.
High [CVE-2026-34070] path traversal in legacy load_prompt functions in langchain-core
path traversal in legacy load_prompt functions in langchain-core. Red Hat rates this important (CVSS 7.5). Weakness: CWE-22. Affected package(s): ansible-automation-platform. Resolved in Red Hat advisory RHSA-2026:24766 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5; Red Hat OpenShift AI 3.3; OpenShift Lightspeed.
High [CVE-2026-33997] Privilege validation bypass during plugin installation
Privilege validation bypass during plugin installation. Red Hat rates this important (CVSS 8.4). Weakness: CWE-266. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; Red Hat multicluster global hub 1.5.0; and 3 more.
High [CVE-2026-34040] Authorization bypass vulnerability
Authorization bypass vulnerability. Red Hat rates this moderate (CVSS 8.4). Weakness: CWE-807. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779925273, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.