Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-64643] Information disclosure via Server Action ID exposure
Information disclosure via Server Action ID exposure. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-201.
Medium [CVE-2026-17574] Denial of Service via crafted HDF5 file processing
Denial of Service via crafted HDF5 file processing. Red Hat rates this moderate (CVSS 5). Weakness: CWE-476.
Medium [CVE-2026-17573] HDF5 library: Denial of Service via crafted HDF5 file processing
HDF5 library: Denial of Service via crafted HDF5 file processing. Red Hat rates this moderate (CVSS 5). Weakness: CWE-763.
Medium [CVE-2026-17572] Denial of Service via crafted file requiring user interaction
Denial of Service via crafted file requiring user interaction. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-47078] Arbitrary file write via relative path traversal in zip module
Arbitrary file write via relative path traversal in zip module. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-22.
Medium [CVE-2026-15003] Heap-buffer-overflow in linker leads to information disclosure and denial of service
Heap-buffer-overflow in linker leads to information disclosure and denial of service. Red Hat rates this moderate (CVSS 5.6). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:47171 with package binutils-main-2.46.1-1.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 3 more.
Medium [CVE-2026-66053] Apache Thrift Python bindings: Information disclosure due to improper certificate validation
Apache Thrift Python bindings: Information disclosure due to improper certificate validation. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-295. Red Hat lists fixing advisory RHSA-2026:49837 with package thrift-main-0.24.0-0.1.hum1.
Medium [CVE-2026-58023] Information disclosure and denial of service due to out-of-bounds read
Information disclosure and denial of service due to out-of-bounds read. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-55970] Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability
Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-48145] Information disclosure due to improper certificate validation
Information disclosure due to improper certificate validation. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-297.
Medium [CVE-2026-16554] Remote code execution due to integer overflow via crafted JSON
Remote code execution due to integer overflow via crafted JSON. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-131.
Medium [CVE-2026-64535] Fix potential UAF when ddgst mismatch
Fix potential UAF when ddgst mismatch. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1341.
Medium [CVE-2026-17501] Denial of Service due to resource allocation manipulation in JSON-Schema-to-GBNF Conversion
Denial of Service due to resource allocation manipulation in JSON-Schema-to-GBNF Conversion. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1050.
Medium [CVE-2026-64538] Fix null-ptr-deref in fib6_nh_mtu_change
Fix null-ptr-deref in fib6_nh_mtu_change(). Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-476.
Medium [CVE-2026-64532] bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}. Red Hat rates this moderate. Weakness: CWE-120.
Medium [CVE-2026-64553] fix info leak in PSAMPLE_ATTR_DATA
fix info leak in PSAMPLE_ATTR_DATA. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-212.
Medium [CVE-2026-64541] fix UAF in smc_cdc_rx_handler by pinning the socket
fix UAF in smc_cdc_rx_handler() by pinning the socket. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-364.
Medium [CVE-2026-64544] asymmetric_keys - fix OOB read in pefile_digest_pe_contents
asymmetric_keys - fix OOB read in pefile_digest_pe_contents. Red Hat rates this low (CVSS 5.5).
Medium [CVE-2026-64537] reject invalid CCM interval at configuration time
reject invalid CCM interval at configuration time. Red Hat rates this low (CVSS 5.5). Weakness: CWE-835.
Medium [CVE-2026-64545] net, bpf: check master for NULL in xdp_master_redirect
net, bpf: check master for NULL in xdp_master_redirect(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.