Red Hat Linux Security Advisories & CVEs
5529 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-61709] Unauthorized access due to ListUsers API returning deliberately excluded users.
Unauthorized access due to ListUsers API returning deliberately excluded users. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-783. Red Hat lists fixing advisory RHSA-2026:68777 with package grafana13-2-main-13.2.1-0.4.hum1, grafana12-4-main-12.4.10-0.5.hum1, grafana12-4-main-12.4.10-0.6.hum1, grafana13-1-main-13.1.6-0.4.hum1. Affected products named by the advisory: Red Hat Hardened Images; Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 6; and 5 more. Affected products named by the advisory: Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; and 1 more.
Medium [CVE-2026-78301] DNS cache poisoning via malformed zone insertion
DNS cache poisoning via malformed zone insertion. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-168. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-19941] DNS wildcard record existence can be masked by an attacker via inapplicable NSEC records
DNS wildcard record existence can be masked by an attacker via inapplicable NSEC records. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-346. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-19662] Denial of Service via crafted DNSSEC responses
Denial of Service via crafted DNSSEC responses. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-84501] Operational log forgery via newline injection
Operational log forgery via newline injection. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-117. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform 8; and 3 more. Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat Offline Knowledge Portal; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-59739] Information disclosure via SetWatches reconnect replay
Information disclosure via SetWatches reconnect replay. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-425. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Fuse 7; and 6 more. Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8; Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat Offline Knowledge Portal; Red Hat OpenShift AI (RHOAI); and 2 more.
Medium [CVE-2026-92081] Denial of Service via unhandled exception on HTTP/2 trailer responses
Denial of Service via unhandled exception on HTTP/2 trailer responses. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-248. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Dev Spaces.
Medium [CVE-2026-85501] Denial of Service via algorithmic complexity attacks on DNSSEC
Denial of Service via algorithmic complexity attacks on DNSSEC. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: unbound.
Medium [CVE-2026-82720] Denial of Service via use-after-free in DoH stream cleanup
Denial of Service via use-after-free in DoH stream cleanup. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-416. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: unbound.
Medium [CVE-2026-80225] Denial of Service via continuous queries on TCP/DoT connection
Denial of Service via continuous queries on TCP/DoT connection. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1050. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: unbound.
Medium [CVE-2026-78227] Denial of Service via use-after-free in DoQ stream output buffer
Denial of Service via use-after-free in DoQ stream output buffer. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-416. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-77955] ZONEMD verification bypass due to asynchronous DNSSEC resolution
ZONEMD verification bypass due to asynchronous DNSSEC resolution. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-345. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: unbound.
Medium [CVE-2026-92091] denial of service via O(n^2) duplicate check on unbounded JWK key_ops array
denial of service via O(n^2) duplicate check on unbounded JWK key_ops array. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-407. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 5 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift AI (RHOAI); Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; and 1 more.
Medium [CVE-2026-19248] Denial of Service vulnerability in XML parsing
Denial of Service vulnerability in XML parsing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-776. Red Hat lists fixing advisory RHSA-2026:59393 with package qt6-qtbase-main-6.11.2-2.hum1, qt5-qtbase-main-5.15.18-5.2.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: qt6-qtbase; Red Hat package: qt5-qtbase.
Medium [CVE-2026-92358] CVE-2026-92358
CVE-2026-92358. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-613. Affected products named by the advisory: Red Hat Build of Keycloak; Red Hat Single Sign-On 7.
Medium [CVE-2026-89912] Don't dereference a NULL collection on ITT save
Don't dereference a NULL collection on ITT save. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-90021] initialize work in f_midi_alloc
initialize work in f_midi_alloc(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-824.
Medium [CVE-2026-89925] Fix memory leak in guest debug handling
Fix memory leak in guest debug handling. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-89886] fix async notifier cleanup leak on parse error
fix async notifier cleanup leak on parse error. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: kernel-rt.
Medium [CVE-2026-89820] fix dc_lock leak on GPU reset error paths
fix dc_lock leak on GPU reset error paths. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.