Red Hat Linux Security Advisories & CVEs
4484 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-89603] Fix seccomp bypass after ptrace with TSYNC
Fix seccomp bypass after ptrace with TSYNC. Red Hat rates this important (CVSS 7.8). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89602] skip sufficiently large global buffers when resizing
skip sufficiently large global buffers when resizing. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89587] fix stack buffer overflow in query_capability
fix stack buffer overflow in query_capability(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-120. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89583] Fix OOB read in eir_get_service_data
Fix OOB read in eir_get_service_data(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89584] validate user space vectors during extraction
validate user space vectors during extraction. Red Hat rates this moderate (CVSS 7). Weakness: CWE-1288. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89582] fix double free in bnx2x_init_firmware error path
fix double free in bnx2x_init_firmware() error path. Red Hat rates this moderate (CVSS 7). Weakness: CWE-1341. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89581] bpf, x86: Fix per-CPU address resolution into an extended register
bpf, x86: Fix per-CPU address resolution into an extended register. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89580] Disable preemption in __bpf_get_stack
Disable preemption in __bpf_get_stack. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89575] dm raid1: reserve space for NUL-terminator in build_constructor_string
dm raid1: reserve space for NUL-terminator in build_constructor_string(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-170. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89570] Make the MCE notifier per-region
Make the MCE notifier per-region. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel-rt.
High [CVE-2026-89569] serialize security confirmation handling
serialize security confirmation handling. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89564] orphan prefetched skbs before multicast forwarding
orphan prefetched skbs before multicast forwarding. Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89563] use skb_cow_head in ip6_tnl_xmit
use skb_cow_head() in ip6_tnl_xmit(). Red Hat rates this important (CVSS 7). Weakness: CWE-1341. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89560] Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation. Red Hat rates this moderate (CVSS 7). Weakness: CWE-1220. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89559] Prevent integer overflow in __nd_label_validate
Prevent integer overflow in __nd_label_validate(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89558] fix still_degraded being inverted in raid10_sync_request
fix still_degraded being inverted in raid10_sync_request(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-480. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89555] reload header after pskb_may_pull
reload header after pskb_may_pull(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89553] reserve the bo in the info ioctl around the vma lookup
reserve the bo in the info ioctl around the vma lookup. Red Hat rates this moderate (CVSS 7). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89551] clamp buf->len to avoid underflow
clamp buf->len to avoid underflow. Red Hat rates this moderate (CVSS 7). Weakness: CWE-191. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89550] enforce krb5 token minimum length
enforce krb5 token minimum length. Red Hat rates this moderate (CVSS 7). Weakness: CWE-369. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.