Red Hat Linux Security Advisories & CVEs
6143 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-40226] systemd nspawn: Escape-to-host action via crafted config file
systemd nspawn: Escape-to-host action via crafted config file. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-348. Affected package(s): systemd-main. Resolved in Red Hat advisory RHSA-2026:7299 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-40225] udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output
udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-250. Affected package(s): systemd-main. Resolved in Red Hat advisory RHSA-2026:7299 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-40224] Local privilege escalation via varlink
Local privilege escalation via varlink. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-266. Affected package(s): systemd-main. Resolved in Red Hat advisory RHSA-2026:7299 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-40223] Local unprivileged user can cause Denial of Service
Local unprivileged user can cause Denial of Service. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-617. Affected package(s): systemd-main. Resolved in Red Hat advisory RHSA-2026:7299 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-35206] Files written to unexpected directory via specially crafted Chart
Files written to unexpected directory via specially crafted Chart. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-22. Affected package(s): helm-cli, rhacm2/multicloud-integrations-rhel9:1782256081, multicluster-engine/backplane-rhel9-operator:1782476869. Resolved in Red Hat advisory RHSA-2026:26441 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-34500] Authentication bypass via client certificate misconfiguration
Authentication bypass via client certificate misconfiguration. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-303. Affected package(s): tomcat, jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:20405 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-34487] Information disclosure via sensitive data in log files
Information disclosure via sensitive data in log files. Red Hat rates this low (CVSS 6.5). Weakness: CWE-538. Affected package(s): tomcat, jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:20405 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-34483] Information disclosure due to improper encoding in JsonAccessLogValve
Information disclosure due to improper encoding in JsonAccessLogValve. Red Hat rates this low (CVSS 5.4). Weakness: CWE-838. Affected package(s): tomcat, jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:20405 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-29145] Authentication bypass due to CLIENT_CERT soft fail misconfiguration
Authentication bypass due to CLIENT_CERT soft fail misconfiguration. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-303. Affected package(s): tomcat, jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:20405 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-25854] Open Redirect vulnerability via LoadBalancerDrainingValve
Open Redirect vulnerability via LoadBalancerDrainingValve. Red Hat rates this low (CVSS 4.3). Weakness: CWE-601. Affected package(s): tomcat, jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:20405 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-24880] HTTP Request/Response Smuggling via invalid chunk extension
HTTP Request/Response Smuggling via invalid chunk extension. Red Hat rates this low (CVSS 4.3). Weakness: CWE-444. Affected package(s): tomcat, jws6-tomcat. Resolved in Red Hat advisory RHSA-2026:20405 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-34757] Information disclosure and data corruption via use-after-free vulnerability
Information disclosure and data corruption via use-after-free vulnerability. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-825. Affected package(s): libpng-main. Resolved in Red Hat advisory RHSA-2026:13719 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-2377] Server-Side Request Forgery via log export functionality
Server-Side Request Forgery via log export functionality. Red Hat rates this important (CVSS 6.5). Weakness: CWE-918. Affected package(s): quay/quay-rhel8:1779811473, quay/quay-rhel8:1779689392, quay/quay-rhel8:1779822261, quay/quay-rhel9:1779204086, quay/quay-rhel8:1779811412, quay/quay-rhel8:1780891395. Resolved in Red Hat advisory RHSA-2026:23361 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Quay 3.10; Red Hat Quay 3.12; Red Hat Quay 3.14; Red Hat Quay 3.15; and 3 more.
Medium [CVE-2025-57847] privilege escalation via excessive group writable /etc/passwd permissions
A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container. Red Hat Product Security has rated this vulnerability as moderate severity for affected products which run on OpenShift. The vulnerability allows for potential privilege escalation within a container, but OpenShift's default, multi-layered security posture effectively mitigates this risk. The primary controls include the default Security Context Constraints (SCC), which severely limit a container's permissions from the start, and SELinux, which enforces mandatory access control to ensure strict isolation. While other container runtime environments may have different controls available and require case-by-case analysis, OpenShift's built-in defenses are designed to prevent this type of attack. Out of Box RHEL configuration isolates a single process inside a container.
Medium [CVE-2026-32281] Go crypto/x509: Denial of Service via inefficient certificate chain validation
Go crypto/x509: Denial of Service via inefficient certificate chain validation. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-1050. Affected package(s): grafana-pcp, skopeo, host-metering, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, openshift-service-mesh/kiali-rhel9:1779520708, quay/quay-rhel9:1779922205. Resolved in Red Hat advisory RHSA-2026:10217 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8.
Medium [CVE-2026-32288] Go's archive/tar package: Denial of Service via maliciously-crafted archive
Go's archive/tar package: Denial of Service via maliciously-crafted archive. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-770. Affected package(s): golang1. Resolved in Red Hat advisory RHSA-2026:7385 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-32289] Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals
Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Affected package(s): golang1. Resolved in Red Hat advisory RHSA-2026:7385 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-32591] server-side request forgery in proxy cache upstream registry configuration
server-side request forgery in proxy cache upstream registry configuration. Red Hat rates this important (CVSS 5.2). Weakness: CWE-918. Affected package(s): quay/quay-rhel9:1780604033. Resolved in Red Hat advisory RHSA-2026:24833 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Quay 3.17; mirror registry for Red Hat OpenShift 2; Red Hat Quay 3.9; Red Hat Quay 3.16; and 5 more.
Medium [CVE-2026-34079] Arbitrary file deletion on host via improper cache file path validation
Arbitrary file deletion on host via improper cache file path validation. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-22. Affected package(s): flatpak. Resolved in Red Hat advisory RHSA-2026:21757 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9.
Medium [CVE-2026-39316] Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.
Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.. Red Hat rates this moderate (CVSS 4). Weakness: CWE-825. Affected package(s): cups-main. Resolved in Red Hat advisory RHSA-2026:8814 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.