Red Hat Linux Security Advisories & Vulnerabilities
16065 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited sources checked less often
Get an email when Red Hat publishes the next one.
See Red Hat's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata, so keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-24675] FreeRDP has a Heap-use-after-free in urb_select_interface
FreeRDP has a Heap-use-after-free in urb_select_interface. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-825. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:6958 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
Medium [CVE-2026-24491] FreeRDP has a heap-use-after-free in video_timer
FreeRDP has a heap-use-after-free in video_timer. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-825. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:6958 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
Medium [CVE-2026-23948] FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()
FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2(). Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-476. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:6958 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
Medium [CVE-2025-14831] Denial of Service via excessive resource consumption during certificate verification
Denial of Service via excessive resource consumption during certificate verification. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-407. Affected package(s): rhpam, rhaiis/vllm-rocm-rhel9:1778244531, gnutls-main, discovery/discovery-server-rhel9:1775668717, insights-proxy/insights-proxy-container-rhel9:1773685509, rhui5/rhua-rhel9:1773670137. Resolved in Red Hat advisory RHSA-2026:6618 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 18 more.
Critical [CVE-2026-1709] Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication
Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication. Red Hat rates this critical (CVSS 9.4). Weakness: CWE-322. Affected package(s): keylime. Resolved in Red Hat advisory RHSA-2026:2225 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.
High [CVE-2026-25793] Blocklist evasion via ECDSA Signature Malleability
Blocklist evasion via ECDSA Signature Malleability. Red Hat rates this important (CVSS 8.1). Weakness: CWE-347. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-25749] Arbitrary code execution via 'helpfile' option processing
Arbitrary code execution via 'helpfile' option processing. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-120. Affected package(s): rhcos, rhaiis/vllm-rocm-rhel9:1778244531, rhui5/haproxy-rhel9:1776868744, rhui5/installer-rhel9:1776868772, vim, rhui5/cds-rhel9:1776868774. Resolved in Red Hat advisory RHSA-2026:4715 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
High [CVE-2026-25580] Information disclosure via Server-Side Request Forgery (SSRF) through malicious URLs in message history.
Information disclosure via Server-Side Request Forgery (SSRF) through malicious URLs in message history.. Red Hat rates this important (CVSS 8.6). Weakness: CWE-918. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-25731] Arbitrary Code Execution via malicious custom template file during ebook conversion
Arbitrary Code Execution via malicious custom template file during ebook conversion. Red Hat rates this important (CVSS 7.8). Weakness: CWE-917. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-25635] Remote Code Execution via path traversal in CHM reader
Remote Code Execution via path traversal in CHM reader. Red Hat rates this important (CVSS 8.6). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-25636] Arbitrary file corruption via path traversal in EPUB conversion
Arbitrary file corruption via path traversal in EPUB conversion. Red Hat rates this important (CVSS 8.2). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-25640] Arbitrary code execution and information disclosure via path traversal in web UI
Arbitrary code execution and information disclosure via path traversal in web UI. Red Hat rates this important (CVSS 7.1). Weakness: CWE-22. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-23740] Arbitrary code execution and file overwrite as root via insecure ast_coredumper file handling
Arbitrary code execution and file overwrite as root via insecure ast_coredumper file handling. Red Hat rates this important (CVSS 7.8). Weakness: CWE-379. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-2100] NULL dereference via C_DeriveKey with specific NULL parameters
NULL dereference via C_DeriveKey with specific NULL parameters. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-824. Affected package(s): p11-kit, insights-proxy/insights-proxy-container-rhel9:1780420428, rhui5/haproxy-rhel9:1779798164, costmanagement/costmanagement-metrics-rhel9-operator:1780946239, p11-kit-main, rhui5/rhua-rhel9:1779798222. Resolved in Red Hat advisory RHSA-2026:7065 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat Insights proxy 1.5; and 4 more.
Medium [CVE-2026-0598] Broken Object Level Authorization Leading to Cross-User AI Conversation Context Injection in Ansible Lightspeed API
Broken Object Level Authorization Leading to Cross-User AI Conversation Context Injection in Ansible Lightspeed API. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-283. Affected package(s): ansible-automation-platform. Resolved in Red Hat advisory RHSA-2026:13545 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2025-68121] Incorrect certificate validation during TLS session resumption
Incorrect certificate validation during TLS session resumption. Red Hat rates this moderate (CVSS 7.4). Affected package(s): openshift4/openshift-route-controller-manager-rhel8:1781867531, openshift4/ose-gcp-cloud-controller-manager-rhel9:1781927538, openshift4/ose-csi-livenessprobe-rhel8:1776999947, openshift4/oc-mirror-plugin-rhel8:1781822901, openshift4/ose-csi-external-snapshotter-rhel8:1776999951, openshift4/ose-prometheus-node-exporter-rhel9:1774294099. Resolved in Red Hat advisory RHSA-2026:5968 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1.
High [CVE-2025-61732] Go cgo: Code smuggling due to comment parsing discrepancy
Go cgo: Code smuggling due to comment parsing discrepancy. Red Hat rates this important (CVSS 7.4). Affected package(s): openshift4/ose-csi-livenessprobe-rhel8:1776999947, openshift4/ose-csi-external-snapshotter-rhel8:1776999951, openshift4/ose-prometheus-node-exporter-rhel9:1774294099, openshift4/ose-azure-file-csi-driver-operator-rhel9:1773363768, openshift4/ose-multus-route-override-cni-rhel8:1777001628, openshift4/ose-tests:1777002345. Resolved in Red Hat advisory RHSA-2026:3469 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux AppStream EUS (v. 10.0); Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux AppStream AUS (v. 8.2); and 41 more.
Medium [CVE-2025-47911] Quadratic parsing complexity in golang.org/x/net/html
Quadratic parsing complexity in golang.org/x/net/html. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-400. Affected package(s): cluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279, cluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1782844225, golang1, cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1782839658, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519, cluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539. Resolved in Red Hat advisory RHSA-2026:7385 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2025-58190] Infinite parsing loop in golang.org/x/net
Infinite parsing loop in golang.org/x/net. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-835. Affected package(s): cluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279, cluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1782844225, golang1, cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1782839658, multicluster-engine/hive-rhel9:1770693331, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519. Resolved in Red Hat advisory RHSA-2026:7385 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Critical [CVE-2026-25521] Locutus is vulnerable to Prototype Pollution
Locutus is vulnerable to Prototype Pollution. Red Hat rates this critical (CVSS 9.3). Weakness: CWE-915. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Free weekly CVE digest
Every Monday: the week's critical and high advisories for Red Hat or every vendor, new CISA KEV entries and upcoming end-of-life dates.