Red Hat Linux Security Advisories & CVEs
6249 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-27888] Denial of Service via crafted PDF
Denial of Service via crafted PDF. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1050. Affected package(s): rhoai/odh-llama-stack-core-rhel9:1775144403. Resolved in Red Hat advisory RHSA-2026:10184 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-27951] Denial of Service via endless blocking loop in Stream_EnsureCapacity
Denial of Service via endless blocking loop in Stream_EnsureCapacity. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-190. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:19811 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
Medium [CVE-2026-26986] Denial of Service via double free vulnerability during disconnect
Denial of Service via double free vulnerability during disconnect. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-825. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:19142 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-25997] Denial of service via heap use-after-free during auto-reconnect
Denial of service via heap use-after-free during auto-reconnect. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-825. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:16014 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
Medium [CVE-2026-25952] Denial of service due to use-after-free vulnerability
Denial of service due to use-after-free vulnerability. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-825. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:19142 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-3203] Buffer Over-read in Wireshark
Buffer Over-read in Wireshark. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-126. Affected package(s): wireshark. Resolved in Red Hat advisory RHSA-2026:26182 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
Medium [CVE-2026-3201] Improperly Controlled Sequential Memory Allocation in Wireshark
Improperly Controlled Sequential Memory Allocation in Wireshark. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1325. Affected package(s): wireshark. Resolved in Red Hat advisory RHSA-2026:26182 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
Medium [CVE-2026-3190] Information Disclosure via improper role enforcement in UMA 2.0 Protection API
Information Disclosure via improper role enforcement in UMA 2.0 Protection API. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-280. Affected package(s): rhbk/keycloak-operator-bundle:26.4.11, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9:26.4. Resolved in Red Hat advisory RHSA-2026:6478 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-26104] Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API
Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-862. Affected package(s): udisks2. Resolved in Red Hat advisory RHSA-2026:5831 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
Medium [CVE-2026-2788] Incorrect boundary conditions in the Audio/Video: GMP component
Incorrect boundary conditions in the Audio/Video: GMP component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2789] Use-after-free in the Graphics: ImageLib component
Use-after-free in the Graphics: ImageLib component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2787] Use-after-free in the DOM: Window and Location component
Use-after-free in the DOM: Window and Location component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2785] Invalid pointer in the JavaScript Engine component
Invalid pointer in the JavaScript Engine component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2786] Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2784] Mitigation bypass in the DOM: Security component
Mitigation bypass in the DOM: Security component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2783] Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2782] Privilege escalation in the Netmonitor component
Privilege escalation in the Netmonitor component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2781] Integer overflow in the Libraries component in NSS
Integer overflow in the Libraries component in NSS. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-2779] Incorrect boundary conditions in the Networking: JAR component
Incorrect boundary conditions in the Networking: JAR component. Red Hat rates this moderate (CVSS 6.1). Affected package(s): thunderbird, firefox. Resolved in Red Hat advisory RHSA-2026:3984 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 1.
Medium [CVE-2026-3121] Privilege escalation via manage-clients permission
Privilege escalation via manage-clients permission. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-266. Affected package(s): rhbk/keycloak-operator-bundle:26.4.11, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9:26.4. Resolved in Red Hat advisory RHSA-2026:6478 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.