Red Hat Linux Security Advisories & CVEs
3180 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-68122] fix peer refcount leak in TCP error paths
fix peer refcount leak in TCP error paths. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911.
Medium [CVE-2026-68119] initialize standalone TCP-AO response padding
initialize standalone TCP-AO response padding. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux for NVIDIA 26; Red Hat package: kernel.
Medium [CVE-2026-68114] replace BUG_ON with WARN_ON
replace BUG_ON() with WARN_ON(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux for NVIDIA 26; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-68106] fix division by zero with invalid uvd dimensions
fix division by zero with invalid uvd dimensions. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-68105] Fix kernel panic during driver load failure
Fix kernel panic during driver load failure. Red Hat rates this low (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux for NVIDIA 26; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-68104] invoke pm_genpd_remove before freeing genpd
invoke pm_genpd_remove() before freeing genpd. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-68102] fix aperture mapping leak
fix aperture mapping leak. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68098] bound DACL dedup walk to copied ACEs
bound DACL dedup walk to copied ACEs. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-59088] denial of service via signed integer overflow in fli file processing
A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integer value. A remote attacker could exploit this by tricking a user into opening a specially crafted FLI file, leading to the application crashing and resulting in a denial of service. This Moderate impact flaw in GIMP's FLI file processing plugin can lead to a denial of service. The vulnerability requires user interaction, as an attacker must convince a local user to open a specially crafted FLI image file, which would cause the GIMP application to crash due to an integer overflow during memory allocation. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-190. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-72585] Authorization bypass allows Editor to delete protected contact points
Authorization bypass allows Editor to delete protected contact points. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-284. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 5; Red Hat Ceph Storage 6; and 3 more. Affected products named by the advisory: Red Hat Ceph Storage 7; Red Hat Ceph Storage 9; Red Hat Hardened Images.
Medium [CVE-2026-66486] GNU cpio: Terminal control sequence injection via crafted archive member names
GNU cpio: Terminal control sequence injection via crafted archive member names. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-94. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: cpio.
Medium [CVE-2026-66485] GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives
GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives. Red Hat rates this moderate (CVSS 5). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: cpio.
Medium [CVE-2026-71394] use of uninitialized memory via a malicious font file
use of uninitialized memory via a malicious font file. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1284.
Medium [CVE-2026-55814] Information disclosure via missing authentication in download APIs
Information disclosure via missing authentication in download APIs. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-306.
Medium [CVE-2026-19404] missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenance
missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenance. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-862.
Medium [CVE-2026-12570] Denial of Service via HDF5 Shape Bomb when loading malicious model files
Denial of Service via HDF5 Shape Bomb when loading malicious model files. Red Hat rates this moderate (CVSS 5). Weakness: CWE-770.
Medium [CVE-2026-72522] Denial of Service due to incorrect Unicode surrogate handling
Denial of Service due to incorrect Unicode surrogate handling. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:54869 with package expat-main-2.8.3-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 4 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat package: firefox; Red Hat package: thunderbird; Red Hat package: mingw-expat.
Medium [CVE-2026-68083] fix path resolution in ksmbd_vfs_kern_path_create
fix path resolution in ksmbd_vfs_kern_path_create. Red Hat rates this moderate. Weakness: CWE-22.
Medium [CVE-2026-68109] replace BUG_ON with WARN_ON
replace BUG_ON() with WARN_ON(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68265] Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC
Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.