Red Hat Linux Security Advisories & Vulnerabilities
16049 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited sources checked less often
Get an email when Red Hat publishes the next one.
See Red Hat's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata, so keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Low [CVE-2025-69646] Denial of Service via malformed DWARF debug_rnglists data
Denial of Service via malformed DWARF debug_rnglists data. Red Hat rates this low (CVSS 2.8). Weakness: CWE-606. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69650] double free in readelf via crafted ELF binary with malformed relocation data
double free in readelf via crafted ELF binary with malformed relocation data. Red Hat rates this low (CVSS 3.3). Weakness: CWE-415. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69652] abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information. Red Hat rates this low (CVSS 3.3). Weakness: CWE-617. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69649] NULL pointer dereference in readelf via crafted ELF binary with malformed header fields
NULL pointer dereference in readelf via crafted ELF binary with malformed header fields. Red Hat rates this low (CVSS 3.3). Weakness: CWE-476. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2025-69651] Denial of Service via crafted ELF binary processing
Denial of Service via crafted ELF binary processing. Red Hat rates this low (CVSS 2.8). Weakness: CWE-824. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:7098 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-29054] Information disclosure due to case-insensitive Connection header processing
Information disclosure due to case-insensitive Connection header processing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-178. Affected package(s): devspaces/traefik-rhel9:1776718585. Resolved in Red Hat advisory RHSA-2026:10175 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat OpenShift Dev Spaces 3.27.
High [CVE-2026-26999] Denial of Service due to incomplete TLS handshake
Denial of Service due to incomplete TLS handshake. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): devspaces/traefik-rhel9:1776718585. Resolved in Red Hat advisory RHSA-2026:10175 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat OpenShift Dev Spaces 3.27.
High [CVE-2026-25048] Denial of Service via multi-level nested syntax
Denial of Service via multi-level nested syntax. Red Hat rates this important (CVSS 7.5). Weakness: CWE-674. Affected package(s): rhaiis/vllm-cuda-rhel9:1774351144, rhaiis/model-opt-cuda-rhel9:1774547384, rhaiis/vllm-rocm-rhel9:1775252598, rhoai/odh-vllm-gaudi-rhel9:1780069069. Resolved in Red Hat advisory RHSA-2026:24977 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat AI Inference Server 3.2; Red Hat OpenShift AI 2.25; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
High [CVE-2026-2092] Unauthorized access via improper validation of encrypted SAML assertions
Unauthorized access via improper validation of encrypted SAML assertions. Red Hat rates this important (CVSS 7.7). Weakness: CWE-1287. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.2.14, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:3925 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4; RHEL-8 based Middleware Containers; Red Hat Single Sign-On 7.6 for RHEL 8; and 2 more.
High [CVE-2026-3047] Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login
Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login. Red Hat rates this important (CVSS 8.8). Weakness: CWE-305. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.2.14, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:3925 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-2603] Unauthorized authentication via disabled SAML Identity Provider
Unauthorized authentication via disabled SAML Identity Provider. Red Hat rates this important (CVSS 8.1). Weakness: CWE-306. Affected package(s): rhbk/keycloak-rhel9-operator:26.2, rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.2.14, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9:26.2, rhbk/keycloak-rhel9-operator:26.4. Resolved in Red Hat advisory RHSA-2026:3925 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.2; Red Hat build of Keycloak 26.4.
High [CVE-2026-3009] Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass)
Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass). Red Hat rates this important (CVSS 8.1). Weakness: CWE-863. Affected package(s): rhbk/keycloak-rhel9, rhbk/keycloak-operator-bundle:26.4.10, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9:26.4. Resolved in Red Hat advisory RHSA-2026:3947 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Keycloak 26.4; Red Hat JBoss Enterprise Application Platform Expansion Pack.
High [CVE-2026-1605] Denial of Service due to unreleased JDK Inflater from compressed HTTP requests
Denial of Service due to unreleased JDK Inflater from compressed HTTP requests. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): eap8-eap-product-conf-parent, eap8-wildfly, devspaces/openvsx-rhel9:1779528224, eap8-activemq-artemis, jetty-server, devspaces/pluginregistry-rhel9:1779359423. Resolved in Red Hat advisory RHSA-2026:25089 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat OpenShift Dev Spaces 3.28; Red Hat JBoss Enterprise Application Platform Expansion Pack; and 11 more.
High [CVE-2025-45691] arbitrary file read via improper URL validation in multimodal inputs
arbitrary file read via improper URL validation in multimodal inputs. Red Hat rates this important (CVSS 7.5). Weakness: CWE-918. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2025-69534] denial of service via malformed HTML-like sequences
denial of service via malformed HTML-like sequences. Red Hat rates this important (CVSS 8.2). Weakness: CWE-617. Affected package(s): rhdh/rhdh-hub-rhel9:1776784286, python3.12-markdown, rhoai/odh-training-rocm62-torch25-py311-rhel9:1776272253, automation-controller, rhdh/rhdh-hub-rhel9:1777903262, rhoai/odh-training-cuda124-torch25-py311-rhel9:1776243287. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Enterprise Linux 10.0 Extended Update Support; and 11 more.
Low [CVE-2025-11143] Security bypass due to differential URI parsing
Security bypass due to differential URI parsing. Red Hat rates this low (CVSS 3.7). Weakness: CWE-444. Affected package(s): offline-knowledge-portal/rhokp-rhel9:1779996999. Resolved in Red Hat advisory RHSA-2026:21773 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Critical [CVE-2026-27446] org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication. Red Hat rates this important (CVSS 9.1). Weakness: CWE-306. Affected package(s): eap8-activemq-artemis, artemis-server. Resolved in Red Hat advisory RHSA-2026:3955 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat build of OptaPlanner 8; Red Hat Fuse 7; and 6 more.
High [CVE-2026-27803] Unauthorized collection management operations due to improper access control
Unauthorized collection management operations due to improper access control. Red Hat rates this important (CVSS 8.3). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-27802] Privilege Escalation via Unauthorized Bulk Permission Update
Privilege Escalation via Unauthorized Bulk Permission Update. Red Hat rates this important (CVSS 8.1). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-0847] Arbitrary file read via path traversal vulnerability
Arbitrary file read via path traversal vulnerability. Red Hat rates this important (CVSS 7.5). Weakness: CWE-22. Affected package(s): rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:1778263054, rhoai/odh-llama-stack-core-rhel9:1775144403, rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1778262893. Resolved in Red Hat advisory RHSA-2026:19712 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift AI 2.25; Red Hat OpenShift AI 3.3; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 1 more.
Free weekly CVE digest
Every Monday: the week's critical and high advisories for Red Hat or every vendor, new CISA KEV entries and upcoming end-of-life dates.