Red Hat Linux Security Advisories & CVEs
4484 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-89548] always drain cache_cleaner before destroying a cache_detail
always drain cache_cleaner before destroying a cache_detail. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89547] Check svc pool percpu counter allocation
Check svc pool percpu counter allocation. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89545] defer rq_argp and rq_resp free until after RCU grace period
defer rq_argp and rq_resp free until after RCU grace period. Red Hat rates this important (CVSS 7). Weakness: CWE-366. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89546] close backchannel before destroying callback service
close backchannel before destroying callback service. Red Hat rates this moderate (CVSS 7). Weakness: CWE-911. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89543] fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89541] harden gss_unwrap_resp_priv length checks
harden gss_unwrap_resp_priv length checks. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89542] harden gss_krb5_unwrap_v2 against short tokens
harden gss_krb5_unwrap_v2 against short tokens. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89540] init gssp_lock before publishing proc entry
init gssp_lock before publishing proc entry. Red Hat rates this moderate (CVSS 7). Weakness: CWE-909. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-89537] Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89538] Reject krb5 v2 wrap tokens with oversized ec field
Reject krb5 v2 wrap tokens with oversized ec field. Red Hat rates this moderate (CVSS 7). Weakness: CWE-131. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89536] wait for in-flight client TLS handshake callback
wait for in-flight client TLS handshake callback. Red Hat rates this important (CVSS 7). Weakness: CWE-911. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89535] Reorder rpcrdma_rn_unregister before rdma_destroy_id
Reorder rpcrdma_rn_unregister before rdma_destroy_id. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel-rt.
High [CVE-2026-89534] Clear sc_cm_id when ADDR_CHANGE replacement fails
Clear sc_cm_id when ADDR_CHANGE replacement fails. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89533] Fix offset arithmetic in read_chunk_range
Fix offset arithmetic in read_chunk_range. Red Hat rates this moderate (CVSS 7). Weakness: CWE-191. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89532] Fix pcl_for_each_segment for empty chunks
Fix pcl_for_each_segment for empty chunks. Red Hat rates this moderate (CVSS 7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-89530] Reject inline replies that overflow the pull-up buffer
Reject inline replies that overflow the pull-up buffer. Red Hat rates this important (CVSS 7). Weakness: CWE-787. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89531] Reject connection when transport allocation fails
Reject connection when transport allocation fails. Red Hat rates this moderate (CVSS 7). Weakness: CWE-772. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89529] Reject oversized Read segments at decode time
Reject oversized Read segments at decode time. Red Hat rates this moderate (CVSS 7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel-rt.
High [CVE-2026-89528] Reject Read lists that exceed the page budget
Reject Read lists that exceed the page budget. Red Hat rates this moderate (CVSS 7). Weakness: CWE-476. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-89526] Validate Read chunk positions before reconstruction
Validate Read chunk positions before reconstruction. Red Hat rates this important (CVSS 8.1). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.