Red Hat Linux Security Advisories & CVEs
6321 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2025-68468] Denial of Service via crafted mDNS/DNS-SD announcements
Denial of Service via crafted mDNS/DNS-SD announcements. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-617. Affected package(s): avahi-main. Resolved in Red Hat advisory RHSA-2026:11316 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-68276] Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag
Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected package(s): avahi-main. Resolved in Red Hat advisory RHSA-2026:11316 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-0822] Heap-based buffer overflow in js_typed_array_sort function
Heap-based buffer overflow in js_typed_array_sort function. Red Hat rates this important (CVSS 6.3). Weakness: CWE-787. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-22773] Denial of Service via specially crafted image in multimodal model serving
Denial of Service via specially crafted image in multimodal model serving. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected package(s): rhaiis/vllm-spyre-rhel9:1782352919, rhoai/odh-vllm-cpu-rhel9:1776259063, rhaiis/vllm-cuda-rhel9:1772160593, rhaiis/vllm-rocm-rhel9:1772160625. Resolved in Red Hat advisory RHSA-2026:10184 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-22693] Null Pointer Dereference in harfbuzz
Null Pointer Dereference in harfbuzz. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-476. Affected package(s): harfbuzz-main. Resolved in Red Hat advisory RHSA-2026:7701 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-68158] Cross-Site Request Forgery due to improper session management in state storage
Cross-Site Request Forgery due to improper session management in state storage. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-352. Affected package(s): quay/quay-rhel9:1775069491, quay/quay-rhel9:1775169226, quay/quay-rhel8:1775169219, satellite/foreman-mcp-server-rhel9:1782228427. Resolved in Red Hat advisory RHSA-2026:6568 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-68151] github.com/coredns/coredns/core/dnsserver: CoreDNS DoS via unbounded connections and oversized messages
github.com/coredns/coredns/core/dnsserver: CoreDNS DoS via unbounded connections and oversized messages. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected package(s): rhacm2/lighthouse-coredns-rhel9:1774086225, rhacm2/lighthouse-coredns-rhel9:1780204249. Resolved in Red Hat advisory RHSA-2026:8151 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-22028] Arbitrary script execution via JSON serialization protection bypass
Arbitrary script execution via JSON serialization protection bypass. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-843. Affected package(s): openshift4/ose-agent-installer-ui-rhel9:1774977480. Resolved in Red Hat advisory RHSA-2026:6564 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-14017] Security bypass due to global TLS option changes in multi-threaded LDAPS transfers
Security bypass due to global TLS option changes in multi-threaded LDAPS transfers. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-1058. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:6893 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-66560] Quarkus REST Worker Thread Exhaustion Vulnerability
Quarkus REST Worker Thread Exhaustion Vulnerability. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-772. Affected package(s): quarkus-rest. Resolved in Red Hat advisory RHSA-2026:1899 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-13151] Denial of Service via stack-based buffer overflow in asn1_expend_octet_string
Denial of Service via stack-based buffer overflow in asn1_expend_octet_string. Red Hat rates this low (CVSS 5.9). Weakness: CWE-120. Affected package(s): insights-proxy/insights-proxy-container-rhel9:1782890503, libtasn1, libtasn1-main, discovery/discovery-ui-rhel9:1782756541, discovery/discovery-server-rhel9:1782763840. Resolved in Red Hat advisory RHSA-2026:28235 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
Medium [CVE-2025-13034] Public key pinning bypass via QUIC and GnuTLS allows server impersonation
Public key pinning bypass via QUIC and GnuTLS allows server impersonation. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-295. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:6893 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-14524] Information disclosure via cross-protocol redirect with OAuth2 bearer token
Information disclosure via cross-protocol redirect with OAuth2 bearer token. Red Hat rates this low (CVSS 6.5). Weakness: CWE-201. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:6893 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-14819] Improper certificate validation due to cached TLS settings reuse
Improper certificate validation due to cached TLS settings reuse. Red Hat rates this low (CVSS 6.8). Weakness: CWE-295. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:6893 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-15224] libssh key passphrase bypass without agent set
libssh key passphrase bypass without agent set. Red Hat rates this low (CVSS 4.7). Weakness: CWE-305. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:6893 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-0707] Keycloak Authorization Header Parsing Leading to Potential Security Control Bypass
Keycloak Authorization Header Parsing Leading to Potential Security Control Bypass. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-551. Affected package(s): rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9:26.4. Resolved in Red Hat advisory RHSA-2026:3947 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-69228] Denial of Service via memory exhaustion from crafted POST request
Denial of Service via memory exhaustion from crafted POST request. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-770. Affected package(s): ansible-automation-platform, rhaiis/vllm-cuda-rhel9:1774351144, rhoai/odh-caikit-nlp-rhel9:1780069094, rhoai/odh-vllm-gaudi-rhel9:1772093278, rhaiis/model-opt-cuda-rhel9:1774547384, rhoai/odh-vllm-cpu-rhel9:1776259063. Resolved in Red Hat advisory RHSA-2026:10184 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-14777] keycloak idor in realm client creating/deleting
A flaw was found in Keycloak. An IDOR (Broken Access Control) vulnerability exists in the admin API endpoints for authorization resource management, specifically in ResourceSetService and PermissionTicketService. The system checks authorization against the resourceServer (client) ID provided in the API request, but the backend database lookup and modification operations (findById, delete) only use the resourceId. This mismatch allows an authenticated attacker with fine-grained admin permissions for one client (e.g., Client A) to delete or update resources belonging to another client (Client B) within the same realm by supplying a valid resource ID. Affected product named by the advisory: Red Hat build of Keycloak 26.4.
Medium [CVE-2025-14512] integer overflow in glib gio attribute escaping causes heap buffer overflow
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values. This vulnerability is rated Moderate for Red Hat products because an integer overflow in GLib's GIO `escape_byte_string()` function can lead to a heap buffer overflow and denial-of-service. This occurs when processing specially crafted file or remote filesystem attribute values, requiring an attacker to provide malicious input. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 18 more. Affected products named by the advisory: Red Hat Enterprise Linux 8.6 Telecommunications Update Service; Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; and 14 more.
Medium [CVE-2025-14087] buffer underflow in gvariant parser leads to heap corruption
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings. The highest threat is to system availability due to potential application crashes when processing maliciously crafted input strings through GLib's GVariant parser. This issue affects applications that utilize g_variant_parse() on untrusted data, leading to memory corruption and possible denial of service. Red Hat severity: Moderate — CVSS 5.6 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 17 more.