Red Hat Linux Security Advisories & CVEs
4452 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-89683] fix dentry ref leak on V4ROOT export filehandle lookup
fix dentry ref leak on V4ROOT export filehandle lookup. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel-rt.
High [CVE-2026-89682] fix fcache_disposal UAF by inlining dispose state into nfsd_net
fix fcache_disposal UAF by inlining dispose state into nfsd_net. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89681] fix layout fence worker double-reference race
fix layout fence worker double-reference race. Red Hat rates this moderate (CVSS 7). Weakness: CWE-772. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89680] fix nfsd_file leak on inter-server COPY setup failure
fix nfsd_file leak on inter-server COPY setup failure. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89678] fix partial-write detection in nfsd_direct_write
fix partial-write detection in nfsd_direct_write. Red Hat rates this moderate (CVSS 7). Weakness: CWE-823. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89677] fix possible fh_compose of wrong dentry in nfsd4_create_file
fix possible fh_compose of wrong dentry in nfsd4_create_file(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
High [CVE-2026-89676] fix stale s2s_cp_stateids IDR entry for async COPY
fix stale s2s_cp_stateids IDR entry for async COPY. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89675] fix UAF in async copy cancel and shutdown
fix UAF in async copy cancel and shutdown. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89672] gate nfs2 setacl by argp->mask
gate nfs2 setacl by argp->mask. Red Hat rates this moderate (CVSS 7). Weakness: CWE-266. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89671] gate nfs3 setacl by argp->mask
gate nfs3 setacl by argp->mask. Red Hat rates this moderate (CVSS 7). Weakness: CWE-115. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89669] initialize copy-notify stateid before publishing it
initialize copy-notify stateid before publishing it. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89670] hold rcu across localio cmpxchg retry
hold rcu across localio cmpxchg retry. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89668] move nfsd_debugfs_init after nfsd4_init_slabs in init_nfsd
move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel-rt.
High [CVE-2026-89665] reject out-of-range useconds in NFSv2 SETATTR/CREATE
reject out-of-range useconds in NFSv2 SETATTR/CREATE. Red Hat rates this moderate (CVSS 7). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89666] reject out-of-range nseconds in NFSv3 SETATTR and create ops
reject out-of-range nseconds in NFSv3 SETATTR and create ops. Red Hat rates this moderate (CVSS 7). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89664] release OPEN-decoded posix ACLs via op_release
release OPEN-decoded posix ACLs via op_release. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel-rt.
High [CVE-2026-89663] revoke copy-notify stateids before dropping their reference
revoke copy-notify stateids before dropping their reference. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89662] Prevent lock owner use-after-free during client teardown
Prevent lock owner use-after-free during client teardown. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89660] Prevent client use-after-free during admin state revocation
Prevent client use-after-free during admin state revocation. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89659] Prevent client use-after-free during delegation revoke
Prevent client use-after-free during delegation revoke. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.