Red Hat Linux Security Advisories & CVEs
5480 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-64553] fix info leak in PSAMPLE_ATTR_DATA
fix info leak in PSAMPLE_ATTR_DATA. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-212.
Medium [CVE-2026-64541] fix UAF in smc_cdc_rx_handler by pinning the socket
fix UAF in smc_cdc_rx_handler() by pinning the socket. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-364.
Medium [CVE-2026-64544] asymmetric_keys - fix OOB read in pefile_digest_pe_contents
asymmetric_keys - fix OOB read in pefile_digest_pe_contents. Red Hat rates this low (CVSS 5.5).
Medium [CVE-2026-64537] reject invalid CCM interval at configuration time
reject invalid CCM interval at configuration time. Red Hat rates this low (CVSS 5.5). Weakness: CWE-835.
Medium [CVE-2026-64545] net, bpf: check master for NULL in xdp_master_redirect
net, bpf: check master for NULL in xdp_master_redirect(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-64547] validate packet_len before pad-byte access in rx_fixup
validate packet_len before pad-byte access in rx_fixup. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-64555] Fix SPSR_EL2 restore in kvm_hyp_handle_mops
Fix SPSR_EL2 restore in kvm_hyp_handle_mops(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-681.
Medium [CVE-2026-64540] fix out-of-bounds read in genelink_rx_fixup
fix out-of-bounds read in genelink_rx_fixup(). Red Hat rates this moderate (CVSS 5.5).
Medium [CVE-2026-64542] fix NULL deref in accept_untracked_na
fix NULL deref in accept_untracked_na(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-64546] fix OOB read in drm_parse_tiled_block
fix OOB read in drm_parse_tiled_block(). Red Hat rates this moderate (CVSS 5.5).
Medium [CVE-2026-64549] avoid OOB read of revision string in bpa10x_setup
avoid OOB read of revision string in bpa10x_setup(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Low [CVE-2026-64647] Information disclosure via server-side request caching
Information disclosure via server-side request caching. Red Hat rates this low (CVSS 3.7). Weakness: CWE-524.
Low [CVE-2026-17513] Denial of Service via ftype argument manipulation
Denial of Service via ftype argument manipulation. Red Hat rates this low (CVSS 3.3). Weakness: CWE-617.
Low [CVE-2026-17512] Information disclosure via out-of-bounds read
Information disclosure via out-of-bounds read. Red Hat rates this low (CVSS 3.3). Weakness: CWE-125.
Unknown [CVE-2026-64533] validate lcns_follow in log_replay conversion
validate lcns_follow in log_replay conversion. Red Hat rates this a security issue. Weakness: CWE-787.
Unknown [CVE-2026-64536] fix OOB reads in is_ap_in_tkip IE loop
fix OOB reads in is_ap_in_tkip() IE loop. Red Hat rates this a security issue. Weakness: CWE-125.
Unknown [CVE-2026-64550] validate MAP frame length before ingress parsing
validate MAP frame length before ingress parsing. Red Hat rates this a security issue. Weakness: CWE-125.
High [CVE-2026-64530] Handle TC_ACT_CONSUMED in tcf_qevent_handle
A flaw was found in the Linux kernel's traffic control (TC) classifier application programming interface (API). The `tcf_qevent_handle` function does not properly handle a consumed socket buffer (`skb`) when it is processed by the defragmentation engine. This can lead to a Use-After-Free (UAF) vulnerability, where the system attempts to use memory that has already been freed. An attacker could potentially exploit this to cause system instability or execute arbitrary code. This Important flaw in the Linux kernel's networking scheduler can lead to a use-after-free vulnerability. Exploitation requires a local attacker to configure specific `tc qdisc` and `tc filter` rules involving RED qdisc with early drop events and connection tracking on fragmented network traffic. This non-default configuration limits the attack surface, but successful exploitation could lead to privilege escalation or a denial of service. Red Hat severity: Important — CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-431. Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
High [CVE-2024-14040] Increase weight to u16
Increase weight to u16. Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-190.
High [CVE-2026-66373] Remote Code Execution via specially crafted RESTORE payload
Remote Code Execution via specially crafted RESTORE payload. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1341. Red Hat lists fixing advisory RHSA-2026:43236 with package valkey-main-9.0.5-0.1.hum1.