Red Hat Linux Security Advisories & Vulnerabilities
16040 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited sources checked less often
Get an email when Red Hat publishes the next one.
See Red Hat's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata, so keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-4867] Denial of Service via catastrophic backtracking from malformed URL parameters
Denial of Service via catastrophic backtracking from malformed URL parameters. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1333. Affected package(s): cluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, cluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539. Resolved in Red Hat advisory RHSA-2026:34342 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-4897] Polkit: polkit: denial of service via unbounded input processing through standard input
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system. A moderate severity issue, a denial of service flaw exists in polkit where a local attacker can exhaust system memory. This vulnerability arises from the `polkit-agent-helper-1` setuid binary processing excessively long input via standard input without size limitations, leading to an out-of-memory condition. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-770. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Hardened Images; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4. Red Hat fixing advisory: RHSA-2026:59997, RHSA-2026:66287. Affected products named by the advisory: Red Hat package: polkit.
Medium [CVE-2026-4887] GIMP:Memory disclosure and denial of service via specially crafted PCX image
GIMP:Memory disclosure and denial of service via specially crafted PCX image. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-193. Affected package(s): gimp, gimp:2.8. Resolved in Red Hat advisory RHSA-2026:17533 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 8 more.
Low [CVE-2026-2239] Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow
A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a specially crafted PSD (Photoshop Document) file. This occurs because the buffer allocated for a Pascal string is not properly null-terminated, leading to an out-of-bounds read when strlen() is subsequently called. Successfully exploiting this vulnerability can cause the application to crash, resulting in an application level Denial of Service. This LOW impact flaw in GIMP can lead to an application level denial of service when processing a specially crafted PSD file. The vulnerability occurs due to a heap-buffer-overflow when reading Pascal strings, causing the application to crash. Exploitation requires user interaction to open a malicious PSD file. Red Hat severity: Low — CVSS 2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L). Weakness: CWE-170. Affected Red Hat products: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 7. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: gimp.
Low [CVE-2026-2271] Gimp: gimp: denial of service via crafted psp image file
A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnerability in the read_creator_block() function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory allocation without proper validation, leading to a heap overflow and an out-of-bounds write. Successful exploitation could result in an application level denial of service. This MODERATE impact flaw in GIMP's PSP image file parser can lead to an application level denial of service. The vulnerability occurs when processing a specially crafted PSP image, which can cause a heap overflow and out-of-bounds write. Red Hat severity: Moderate — CVSS 3.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). Weakness: CWE-190. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: gimp.
Low [CVE-2026-4874] Server-Side Request Forgery via OIDC token endpoint manipulation
Server-Side Request Forgery via OIDC token endpoint manipulation. Red Hat rates this low (CVSS 3.1). Weakness: CWE-918. Affected package(s): rhbk/keycloak-operator-bundle:26.4.13, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9:26.4, rhbk/keycloak-operator-bundle:26.6.3, rhbk/keycloak-rhel9:26.6. Resolved in Red Hat advisory RHSA-2026:30049 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Critical [CVE-2025-70888] Remote privilege escalation
Remote privilege escalation. Red Hat rates this critical (CVSS 10). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-30892] Privilege escalation due to incorrect parsing of the `--user` option
Privilege escalation due to incorrect parsing of the `--user` option. Red Hat rates this moderate (CVSS 7.8). Weakness: CWE-115. Affected package(s): crun. Resolved in Red Hat advisory RHSA-2026:28036 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2026-33247] Information disclosure of credentials via monitoring port and command-line arguments
Information disclosure of credentials via monitoring port and command-line arguments. Red Hat rates this important (CVSS 7.5). Weakness: CWE-214. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; and 4 more.
High [CVE-2026-34881] Server-Side Request Forgery leading to unauthorized internal network access
Server-Side Request Forgery leading to unauthorized internal network access. Red Hat rates this important (CVSS 7.1). Weakness: CWE-918. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; Red Hat OpenStack Platform 18.0; Red Hat OpenStack Services on OpenShift 18.0.
High [CVE-2026-33219] Denial of Service via unbounded memory use in WebSockets
Denial of Service via unbounded memory use in WebSockets. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; and 4 more.
High [CVE-2026-33218] Denial of Service via malformed message pre-authentication on leafnode port
Denial of Service via malformed message pre-authentication on leafnode port. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1286. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; and 4 more.
High [CVE-2026-33217] Access control bypass via unapplied ACLs in MQTT namespace
Access control bypass via unapplied ACLs in MQTT namespace. Red Hat rates this important (CVSS 8.1). Weakness: CWE-425. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; and 4 more.
High [CVE-2026-33216] Information disclosure of MQTT passwords through monitoring endpoints
Information disclosure of MQTT passwords through monitoring endpoints. Red Hat rates this important (CVSS 8.6). Weakness: CWE-213. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; and 4 more.
High [CVE-2026-29785] Denial of Service via leafnode compression
Denial of Service via leafnode compression. Red Hat rates this important (CVSS 7.5). Weakness: CWE-409. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; and 4 more.
High [CVE-2026-27889] Denial of Service via malformed WebSockets frame
Denial of Service via malformed WebSockets frame. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1286. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2; Red Hat multicluster global hub 1.4.4; Red Hat multicluster global hub 1.6.0; and 4 more.
High [CVE-2026-3104] Denial of Service via specially crafted domain query causing a memory leak
Denial of Service via specially crafted domain query causing a memory leak. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): bind-main. Resolved in Red Hat advisory RHSA-2026:6935 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: BIND 9; Red Hat Hardened Images.
High [CVE-2026-1519] Denial of Service via maliciously crafted DNSSEC-validated zone
Denial of Service via maliciously crafted DNSSEC-validated zone. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): bind, bind9.16, bind9.18, rhcos, bind-main. Resolved in Red Hat advisory RHSA-2026:29863 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: BIND 9; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Enterprise Linux 7 Extended Lifecycle Support; and 19 more.
High [CVE-2026-3608] Denial of Service via maliciously crafted message
Denial of Service via maliciously crafted message. Red Hat rates this important (CVSS 7.5). Weakness: CWE-617. Affected package(s): kea. Resolved in Red Hat advisory RHSA-2026:7342 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support.
High [CVE-2026-23375] deny THP for files on anonymous inodes
deny THP for files on anonymous inodes. Red Hat rates this moderate (CVSS 7). Weakness: CWE-825. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:21557 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
Free weekly CVE digest
Every Monday: the week's critical and high advisories for Red Hat or every vendor, new CISA KEV entries and upcoming end-of-life dates.