Red Hat Linux Security Advisories & CVEs
5485 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-17662] Insufficient policy enforcement in Prefetch
Insufficient policy enforcement in Prefetch. Red Hat rates this important (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-62946] Denial of Service via integer overflow in JNX decoder on 32-bit systems
Denial of Service via integer overflow in JNX decoder on 32-bit systems. Red Hat rates this moderate (CVSS 5.1). Weakness: CWE-190.
Medium [CVE-2026-62363] Denial of Service via crafted argument in fx operation
Denial of Service via crafted argument in fx operation. Red Hat rates this moderate (CVSS 5). Weakness: CWE-787.
Medium [CVE-2026-18382] service-account client credentials sent to user-controlled token_url
service-account client credentials sent to user-controlled token_url. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-918.
Medium [CVE-2022-4994] wean fast IN from emulator_pio_in
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulator_pio_in Use __emulator_pio_in() directly for fast PIO instead of bouncing through emulator_pio_in() now that __emulator_pio_in() fills "val" when handling in-kernel PIO. vcpu->arch.pio.count is guaranteed to be '0', so this a pure nop. emulator_pio_in_emulated is now the last caller of emulator_pio_in. No functional change intended. Red Hat severity: Low — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-908. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE.
Low [CVE-2026-18018] Inappropriate implementation in Updater
Inappropriate implementation in Updater. Red Hat rates this low (CVSS 2.8).
Low [CVE-2026-18014] Insufficient validation of untrusted input in DevTools
Insufficient validation of untrusted input in DevTools. Red Hat rates this low. Weakness: CWE-434.
Low [CVE-2026-18010] Inappropriate implementation in Passwords
Inappropriate implementation in Passwords. Red Hat rates this low. Weakness: CWE-1021.
Low [CVE-2026-18007] Inappropriate implementation in Input
Inappropriate implementation in Input. Red Hat rates this low. Weakness: CWE-79.
Low [CVE-2026-18004] Insufficient policy enforcement in Speech
Insufficient policy enforcement in Speech. Red Hat rates this low (CVSS 3.2). Weakness: CWE-346.
Low [CVE-2026-18001] Inappropriate implementation in WebGL
Inappropriate implementation in WebGL. Red Hat rates this low (CVSS 3.1). Weakness: CWE-825.
Low [CVE-2026-18000] Insufficient policy enforcement in USB
Insufficient policy enforcement in USB. Red Hat rates this low (CVSS 2.8). Weakness: CWE-346.
Low [CVE-2026-17997] Inappropriate implementation in Passwords
Inappropriate implementation in Passwords. Red Hat rates this low (CVSS 2.4). Weakness: CWE-368.
Low [CVE-2026-17996] Inappropriate implementation in Browser
Inappropriate implementation in Browser. Red Hat rates this low (CVSS 3.9). Weakness: CWE-807.
Low [CVE-2026-17993] Race in Updater
Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low) A race flaw was found in the Updater component of the Chromium browser. Upstream bug(s): Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory. Red Hat severity: Low — CVSS 3.9 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N). Weakness: CWE-367.
Low [CVE-2026-17992] Uninitialized Use in Skia
Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low) An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory. Red Hat severity: Low — CVSS 0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N). Weakness: CWE-824.
Low [CVE-2026-17988] Insufficient validation of untrusted input in Navigation
Insufficient validation of untrusted input in Navigation. Red Hat rates this low (CVSS 2.8). Weakness: CWE-1286.
Low [CVE-2026-17980] Inappropriate implementation in UI
Inappropriate implementation in UI. Red Hat rates this low (CVSS 3.1). Weakness: CWE-1021.
Low [CVE-2026-17979] Race in V8
Race in V8. Red Hat rates this low. Weakness: CWE-366.
Low [CVE-2026-17976] Policy bypass in Extensions
Policy bypass in Extensions. Red Hat rates this low. Weakness: CWE-289.