Red Hat Linux Security Advisories & CVEs
5197 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Low [CVE-2025-69645] Binutils objdump: Denial of Service via crafted DWARF debug information
Binutils objdump: Denial of Service via crafted DWARF debug information. Red Hat rates this low (CVSS 2.8). Weakness: CWE-1285. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69644] Denial of Service via crafted binary with malformed DWARF debug information
Denial of Service via crafted binary with malformed DWARF debug information. Red Hat rates this low (CVSS 2.8). Weakness: CWE-606. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69646] Denial of Service via malformed DWARF debug_rnglists data
Denial of Service via malformed DWARF debug_rnglists data. Red Hat rates this low (CVSS 2.8). Weakness: CWE-606. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69650] double free in readelf via crafted ELF binary with malformed relocation data
double free in readelf via crafted ELF binary with malformed relocation data. Red Hat rates this low (CVSS 3.3). Weakness: CWE-415. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69652] abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information. Red Hat rates this low (CVSS 3.3). Weakness: CWE-617. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69649] NULL pointer dereference in readelf via crafted ELF binary with malformed header fields
NULL pointer dereference in readelf via crafted ELF binary with malformed header fields. Red Hat rates this low (CVSS 3.3). Weakness: CWE-476. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69651] Denial of Service via crafted ELF binary processing
Denial of Service via crafted ELF binary processing. Red Hat rates this low (CVSS 2.8). Weakness: CWE-824. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-29054] Information disclosure due to case-insensitive Connection header processing
Information disclosure due to case-insensitive Connection header processing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-178. Affected package(s): devspaces/traefik-rhel9:1776718585. Resolved in Red Hat advisory RHSA-2026:10175 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat OpenShift Dev Spaces 3.27.
High [CVE-2026-26999] Denial of Service due to incomplete TLS handshake
Denial of Service due to incomplete TLS handshake. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): devspaces/traefik-rhel9:1776718585. Resolved in Red Hat advisory RHSA-2026:10175 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat OpenShift Dev Spaces 3.27.
High [CVE-2026-25048] Denial of Service via multi-level nested syntax
Denial of Service via multi-level nested syntax. Red Hat rates this important (CVSS 7.5). Weakness: CWE-674. Affected package(s): rhaiis/vllm-cuda-rhel9:1774351144, rhaiis/model-opt-cuda-rhel9:1774547384, rhaiis/vllm-rocm-rhel9:1775252598, rhoai/odh-vllm-gaudi-rhel9:1780069069. Resolved in Red Hat advisory RHSA-2026:24977 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat AI Inference Server 3.2; Red Hat OpenShift AI 2.25; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
High [CVE-2026-2092] Unauthorized access via improper validation of encrypted SAML assertions
Unauthorized access via improper validation of encrypted SAML assertions. Red Hat rates this important (CVSS 7.7). Weakness: CWE-1287. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.2.14, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:3925 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-3047] Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login
Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login. Red Hat rates this important (CVSS 8.8). Weakness: CWE-305. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.2.14, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:3925 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-2603] Unauthorized authentication via disabled SAML Identity Provider
Unauthorized authentication via disabled SAML Identity Provider. Red Hat rates this important (CVSS 8.1). Weakness: CWE-306. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.2.14, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:3925 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-3009] Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass)
Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass). Red Hat rates this important (CVSS 8.1). Weakness: CWE-863. Affected package(s): rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9:26.4. Resolved in Red Hat advisory RHSA-2026:3947 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat build of Keycloak 26.4.
High [CVE-2026-1605] Denial of Service due to unreleased JDK Inflater from compressed HTTP requests
Denial of Service due to unreleased JDK Inflater from compressed HTTP requests. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): eap8-eap-product-conf-parent, eap8-wildfly, devspaces/openvsx-rhel9:1779528224, eap8-activemq-artemis, jetty-server, devspaces/pluginregistry-rhel9:1779359423. Resolved in Red Hat advisory RHSA-2026:25089 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat OpenShift Dev Spaces 3.28; OpenShift Developer Tools and Services.
High [CVE-2025-45691] arbitrary file read via improper URL validation in multimodal inputs
arbitrary file read via improper URL validation in multimodal inputs. Red Hat rates this important (CVSS 7.5). Weakness: CWE-918. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2025-69534] denial of service via malformed HTML-like sequences
denial of service via malformed HTML-like sequences. Red Hat rates this important (CVSS 8.2). Weakness: CWE-617. Affected package(s): rhdh/rhdh-hub-rhel9:1776784286, python3.12-markdown, rhoai/odh-training-rocm62-torch25-py311-rhel9:1776272253, automation-controller, rhdh/rhdh-hub-rhel9:1777903262, rhoai/odh-training-cuda124-torch25-py311-rhel9:1776243287. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Enterprise Linux 10.0 Extended Update Support; and 11 more.
Low [CVE-2025-11143] Security bypass due to differential URI parsing
Security bypass due to differential URI parsing. Red Hat rates this low (CVSS 3.7). Weakness: CWE-444. Affected package(s): offline-knowledge-portal/rhokp-rhel9:1779996999. Resolved in Red Hat advisory RHSA-2026:21773 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Critical [CVE-2026-27446] org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication. Red Hat rates this important (CVSS 9.1). Weakness: CWE-306. Affected package(s): eap8-activemq-artemis, artemis-server. Resolved in Red Hat advisory RHSA-2026:3955 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat build of OptaPlanner 8; Red Hat Fuse 7; and 1 more.
High [CVE-2026-27803] Unauthorized collection management operations due to improper access control
Unauthorized collection management operations due to improper access control. Red Hat rates this important (CVSS 8.3). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.