Red Hat Linux Security Advisories & CVEs
3177 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-68291] Linux kernel: idpf driver null pointer dereference leads to Denial of Service
Linux kernel: idpf driver null pointer dereference leads to Denial of Service. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux for NVIDIA 26; Red Hat package: kernel.
Medium [CVE-2026-68287] fix size calculations for 64-bit attributes
fix size calculations for 64-bit attributes. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux for NVIDIA 26; Red Hat package: kernel-rt.
Medium [CVE-2026-68286] perform u64_stats updates under IRQ-disabled section
perform u64_stats updates under IRQ-disabled section. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-364. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux for NVIDIA 26; Red Hat package: kernel-rt.
Medium [CVE-2026-68284] Linux kernel: bpf/sockmap use-after-free vulnerability leading to denial of service
Linux kernel: bpf/sockmap use-after-free vulnerability leading to denial of service. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-68283] Fix use-after-free freeing trigger private data
Fix use-after-free freeing trigger private data. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-68282] Add missing error check for platform_get_resource
Add missing error check for platform_get_resource(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-68281] Count paired job fence as dependency in prepare_job
Count paired job fence as dependency in prepare_job(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-805. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux for NVIDIA 26; Red Hat package: kernel.
Medium [CVE-2026-68279] fix OOB reads in remote DPCD/I2C sideband reply parsers
fix OOB reads in remote DPCD/I2C sideband reply parsers. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-68275] check amdgpu_vm_bo_find result in GET_MAPPING_INFO
check amdgpu_vm_bo_find() result in GET_MAPPING_INFO. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-68272] validate CP_GFX_SHADOW chunk size in CS pass1
validate CP_GFX_SHADOW chunk size in CS pass1. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-68271] fix reversed error cleanup order in ucopy functions
fix reversed error cleanup order in ucopy functions. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-68270] Avoid possible truncation with calculating visible size
Avoid possible truncation with calculating visible size. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-190.
Medium [CVE-2026-68269] Add missing nospec on parallel submit slot
Add missing nospec on parallel submit slot. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-515.
Medium [CVE-2026-68268] Return error on non-migratable faults requiring devmem
Return error on non-migratable faults requiring devmem. Red Hat rates this low (CVSS 5.5). Weakness: CWE-252.
Medium [CVE-2026-68262] Linux kernel: Memory corruption in drm/imagination
Linux kernel: Memory corruption in drm/imagination. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux for NVIDIA 26; Red Hat package: kernel.
Medium [CVE-2026-68260] acquire vm_ctx->lock before mapping memory to GPU VM
acquire vm_ctx->lock before mapping memory to GPU VM. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux for NVIDIA 26; Red Hat package: kernel.
Medium [CVE-2026-68258] Check bounds on CRIU restore queue type and mqd size
Check bounds on CRIU restore queue type and mqd size. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux for NVIDIA 26; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-68256] DP alt mode timeout path leaks prev_sink reference
DP alt mode timeout path leaks prev_sink reference. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-68255] bound EDID block reads to the response buffer
bound EDID block reads to the response buffer. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68254] require valid min/max vfreq for VRR
require valid min/max vfreq for VRR. Red Hat rates this low (CVSS 5.5). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.