Red Hat Linux Security Advisories & CVEs
5187 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-103001] Token validation bypass via options dictionary mutation
Token validation bypass via options dictionary mutation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-358.
Medium [CVE-2026-102995] Denial of Service via excessive memory consumption in font mapping
Denial of Service via excessive memory consumption in font mapping. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Lightspeed Core; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat Quay 3.
Medium [CVE-2026-102993] Denial of Service via crafted Roman page labels
Denial of Service via crafted Roman page labels. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Lightspeed Core; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat Quay 3.
Medium [CVE-2026-103387] Denial of Service via crafted mailto URI
Denial of Service via crafted mailto URI. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-248. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-103399] HTTP/1 request smuggling via undrained Expect: 100-continue body
HTTP/1 request smuggling via undrained Expect: 100-continue body. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-444. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libsoup3-devel; Red Hat package: libsoup3-doc; Red Hat package: libsoup3.src; and 2 more.
Medium [CVE-2026-47562] Denial of Service via kernel log injection
Denial of Service via kernel log injection. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-117. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47531] Denial of Service via null pointer dereference in kernel mode layer
Denial of Service via null pointer dereference in kernel mode layer. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47526] Denial of Service via null pointer dereference in firmware
Denial of Service via null pointer dereference in firmware. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47604] Information disclosure via missing authorization checks
Information disclosure via missing authorization checks. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-283. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47603] Information disclosure via missing authorization in kernel mode driver
Information disclosure via missing authorization in kernel mode driver. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-283. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47584] Denial of Service via NULL pointer dereference in kernel module
Denial of Service via NULL pointer dereference in kernel module. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47568] Denial of Service via uncontrolled kernel logging
Denial of Service via uncontrolled kernel logging. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47567] Denial of Service via DRM VMA address space exhaustion
Denial of Service via DRM VMA address space exhaustion. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47566] Denial of Service via kernel memory leak
Denial of Service via kernel memory leak. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47557] Denial of Service via NULL pointer dereference in kernel mode layer
Denial of Service via NULL pointer dereference in kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47555] Information disclosure via uninitialized kernel memory copy
Information disclosure via uninitialized kernel memory copy. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47534] Denial of Service via divide-by-zero in kernel mode layer
Denial of Service via divide-by-zero in kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47517] Denial of Service via crafted ioctl request
Denial of Service via crafted ioctl request. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47492] Denial of Service via improper access control in the kernel mode layer
Denial of Service via improper access control in the kernel mode layer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-862.
Medium [CVE-2026-47518] Code execution via improper permission assignment in secure microcontroller
Code execution via improper permission assignment in secure microcontroller. Red Hat rates this moderate (CVSS 6). Weakness: CWE-266. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.