Red Hat Linux Security Advisories & CVEs
3176 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-74401] fix add msg handle in send_queue ordered
fix add msg handle in send_queue ordered. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74417] fix integer overflow in radeon_align_pitch
fix integer overflow in radeon_align_pitch(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74343] fix xattr race condition with multiple superblocks
fix xattr race condition with multiple superblocks. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367.
Medium [CVE-2026-74303] fix NULL pointer dereference in qca_dmp_hdr for non-serdev device
fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-74307] validate donor file superblock early in EXT4_IOC_MOVE_EXT
validate donor file superblock early in EXT4_IOC_MOVE_EXT. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-833. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-74428] Fix double unlock in rxrpc_recvmsg
Fix double unlock in rxrpc_recvmsg(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-832. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-74379] account for partial discontiguous resource upon removal
account for partial discontiguous resource upon removal. Red Hat rates this low (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74374] md/raid1,raid10: fix error-path detection with md_cloned_bio
md/raid1,raid10: fix error-path detection with md_cloned_bio(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-833. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-74429] Fix the reception of a reply packet before data transmission
Fix the reception of a reply packet before data transmission. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-74278] Fix kernel heap address leak in bounce_error_event
Fix kernel heap address leak in bounce_error_event(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-212. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74316] Handle layout stid in nfsd4_drop_revoked_stid
Handle layout stid in nfsd4_drop_revoked_stid(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74323] Fix possible token leak in mt7996_tx_prepare_skb
Fix possible token leak in mt7996_tx_prepare_skb(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74370] fix TOCTOU race in luo_session_retrieve
fix TOCTOU race in luo_session_retrieve(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367.
Medium [CVE-2026-74425] handle CB.InitCallBackState3 requests without a server record
handle CB.InitCallBackState3 requests without a server record. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-166. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel.
Medium [CVE-2026-74351] rebase copied fsdlm LVB pointers in locking_state
rebase copied fsdlm LVB pointers in locking_state. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-74392] limit target bio polling to one shot
limit target bio polling to one shot. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1050. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-74291] Check PCM and DAI name strings before use
Check PCM and DAI name strings before use. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74266] Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
Do not call qdisc_tree_reduce_backlog during peek before restoring qlen. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-74300] validate codec capability element length
validate codec capability element length. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-74294] Validate written enum values
Validate written enum values. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1287. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.