Red Hat Linux Security Advisories & CVEs
5187 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-47586] arbitrary code execution via kernel module use-after-free
arbitrary code execution via kernel module use-after-free. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47565] arbitrary code execution via kernel mode race condition
arbitrary code execution via kernel mode race condition. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47547] Arbitrary code execution via improper input validation in firmware
Arbitrary code execution via improper input validation in firmware. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-20.
Medium [CVE-2026-47543] arbitrary code execution via improper input validation in kernel mode layer
arbitrary code execution via improper input validation in kernel mode layer. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-20.
Medium [CVE-2026-47538] Arbitrary code execution via firmware out-of-bounds write
Arbitrary code execution via firmware out-of-bounds write. Red Hat rates this moderate. Weakness: CWE-787.
Medium [CVE-2026-47537] arbitrary code execution via out-of-bounds write in kernel mode layer
arbitrary code execution via out-of-bounds write in kernel mode layer. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47533] arbitrary code execution via kernel-mode array indexing flaw
arbitrary code execution via kernel-mode array indexing flaw. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47532] Arbitrary code execution via kernel mode out-of-bounds write
Arbitrary code execution via kernel mode out-of-bounds write. Red Hat rates this moderate. Weakness: CWE-787.
Medium [CVE-2026-47527] Arbitrary code execution via firmware out-of-bounds read
Arbitrary code execution via firmware out-of-bounds read. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47525] Arbitrary code execution via improper array index validation
Arbitrary code execution via improper array index validation. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1285. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47524] Arbitrary code execution via out-of-bounds read
Arbitrary code execution via out-of-bounds read. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-47515] Arbitrary code execution via kernel-mode unbounded string operation
Arbitrary code execution via kernel-mode unbounded string operation. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: nvidia-driver.
Medium [CVE-2026-103118] Denial of Service via uncontrolled recursion in WPG file handler
Denial of Service via uncontrolled recursion in WPG file handler. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-835.
Medium [CVE-2026-13719] Information disclosure via alert rules list API
Information disclosure via alert rules list API. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-863. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 4 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: grafana.
Medium [CVE-2026-13720] Dashboard modification lockout via forged file-provisioning metadata
Dashboard modification lockout via forged file-provisioning metadata. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 4 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat package: grafana.
Medium [CVE-2026-94029] Denial of Service via memory exhaustion in SFTP check-file extension
Denial of Service via memory exhaustion in SFTP check-file extension. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apicurio Registry 3; Red Hat Fuse 7.
Medium [CVE-2026-92872] Information disclosure via log files
Information disclosure via log files. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-538.
Medium [CVE-2026-92869] Denial of Service via out-of-bounds write
Denial of Service via out-of-bounds write. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-787.
Medium [CVE-2026-92868] Authentication bypass via improper certificate validation
Authentication bypass via improper certificate validation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-295.
Medium [CVE-2026-81842] Authorization bypass via missing destination folder permission check
Authorization bypass via missing destination folder permission check. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639. Red Hat lists fixing advisory RHSA-2026:74164 with package grafana13-2-main-13.2.1-0.8.hum1, grafana13-1-main-13.1.6-0.5.hum1, grafana12-4-main-12.4.12-0.2.hum1. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; and 6 more. Affected products named by the advisory: Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more.