Red Hat Linux Security Advisories & CVEs
3037 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-72082] Fix refcount leak in efct_hw_io_abort
Fix refcount leak in efct_hw_io_abort(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72081] Fix I/O leak on unsupported additional CDB
Fix I/O leak on unsupported additional CDB. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-72113] add missing device refcount for CAN filter removal
add missing device refcount for CAN filter removal. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68473] correct check for CONFIG_PPC_E500 in mask_user_address
correct check for CONFIG_PPC_E500 in mask_user_address(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1025.
Medium [CVE-2026-72013] Prevent NULL pointer dereference in machine_kexec_prepare
Prevent NULL pointer dereference in machine_kexec_prepare(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-72094] Fix potential NULL pointer dereference
Fix potential NULL pointer dereference. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-72022] fix SAP refcount leak in llc_ui_autobind
fix SAP refcount leak in llc_ui_autobind(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911.
Medium [CVE-2026-72108] dm thin metadata: fix metadata snapshot consistency on commit failure
dm thin metadata: fix metadata snapshot consistency on commit failure. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72043] Fix missing dirty page tracking in {pte,pmd}_wrprotect
Fix missing dirty page tracking in {pte,pmd}_wrprotect(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911.
Medium [CVE-2026-72085] Free unsubmitted command instead of double-putting it
Free unsubmitted command instead of double-putting it. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-911.
Medium [CVE-2026-72016] Fix NULL kobject warning in cpuhp_smt_enable
Fix NULL kobject warning in cpuhp_smt_enable(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Medium [CVE-2026-72110] bpf,fork: wipe ->bpf_storage before bailouts that access it
bpf,fork: wipe ->bpf_storage before bailouts that access it. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72106] fix a possible overflow in list_version_get_info
fix a possible overflow in list_version_get_info. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-131. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72093] Fix use-after-free in amdxdna_gem_dmabuf_mmap
Fix use-after-free in amdxdna_gem_dmabuf_mmap(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-68460] fix potential deadlock in f2fs_balance_fs
fix potential deadlock in f2fs_balance_fs(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-833.
Medium [CVE-2026-72127] report NAPI thread PID in the caller's pid namespace
report NAPI thread PID in the caller's pid namespace. Red Hat rates this low (CVSS 5.5). Weakness: CWE-272. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-72064] Sync page pool RX frags for CPU
Sync page pool RX frags for CPU. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-820. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68456] wait for pre-firmware load in.disconnect
wait for pre-firmware load in.disconnect(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-366. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-72120] add missing rcu list annotations and operations
add missing rcu list annotations and operations. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-821. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
Medium [CVE-2026-72060] guard PA stat lookups
guard PA stat lookups. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-190.