Red Hat Linux Security Advisories & CVEs
5477 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-64329] Fix use-after-free of ucsi on remove
Fix use-after-free of ucsi on remove. Red Hat rates this moderate (CVSS 5.5).
Medium [CVE-2026-64453] fix disconnect UAF in client teardown
fix disconnect UAF in client teardown. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-64313] ecc - Fix carry overflow in vli multiplication
ecc - Fix carry overflow in vli multiplication. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-190.
Medium [CVE-2026-64487] fix out-of-bounds read in the Traktor Kontrol S4 input parser
fix out-of-bounds read in the Traktor Kontrol S4 input parser. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-64468] fix UAF in binder_free_transaction
fix UAF in binder_free_transaction(). Red Hat rates this moderate. Weakness: CWE-366.
Medium [CVE-2026-64307] ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
ccp - Do not initialize SNP for ioctl(SNP_CONFIG). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-455.
Medium [CVE-2026-64310] ccp - Do not initialize SNP for SEV ioctls
ccp - Do not initialize SNP for SEV ioctls. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-909.
Medium [CVE-2026-64526] fix missing ethnl_ops_complete
fix missing ethnl_ops_complete(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-459.
Medium [CVE-2026-64460] Skip VF Resizable BAR restore on read error
Skip VF Resizable BAR restore on read error. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-64411] terminate table name before find_table_lock
terminate table name before find_table_lock(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-64412] module names must be null-terminated
module names must be null-terminated. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-64476] Latch disable_idle_d3 per device
Latch disable_idle_d3 per device. Red Hat rates this low (CVSS 5.5).
Medium [CVE-2026-64289] Set upper bounds on cache invalidation entry_num and entry_len
Set upper bounds on cache invalidation entry_num and entry_len. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-606.
Medium [CVE-2026-64465] Fix sleep in atomic context in xhci_free_streams
Fix sleep in atomic context in xhci_free_streams(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-413.
Medium [CVE-2026-64469] fix UAF in binder_thread_release
fix UAF in binder_thread_release(). Red Hat rates this moderate. Weakness: CWE-825.
Medium [CVE-2026-64407] Fix out-of-bounds firmware read in nxp_recv_fw_req_v3
Fix out-of-bounds firmware read in nxp_recv_fw_req_v3(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-64381] Fix next buffer leak in receive_encrypted_standard
Fix next buffer leak in receive_encrypted_standard(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-64455] Fix slab-use-after-free in chaoskey_release
Fix slab-use-after-free in chaoskey_release(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-64413] zero chainstack array
zero chainstack array. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-824.
Medium [CVE-2026-64408] pin L2CAP connection during netdev registration
pin L2CAP connection during netdev registration. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.