Red Hat Linux Security Advisories & CVEs
5652 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-80949] Fix memory leak in brcmf_sdio_read_control
Fix memory leak in brcmf_sdio_read_control(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-80946] copy request headers via a stack buffer for io-uring
copy request headers via a stack buffer for io-uring. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-501.
Medium [CVE-2026-80943] check QoS TID before indexing tids
check QoS TID before indexing tids. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-80942] Fix possible memory leak in rtl92du_init_sw_vars
Fix possible memory leak in rtl92du_init_sw_vars(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
Medium [CVE-2026-80940] fix resource leak on failed NAPI setup
fix resource leak on failed NAPI setup. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-80941] Fix potential memory leak in rtw_txq_push_skb
Fix potential memory leak in rtw_txq_push_skb(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-80939] add.shutdown callback to stop rfkill polling on reboot
add.shutdown callback to stop rfkill polling on reboot. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-80938] avoid waiting for mac work under the mt76 mutex
avoid waiting for mac work under the mt76 mutex. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-833.
Medium [CVE-2026-80936] cancel mlo_pm_work on stop
cancel mlo_pm_work on stop. Red Hat rates this low (CVSS 5.5). Weakness: CWE-763. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-80937] bound the device EEPROM address before the EFUSE copy
bound the device EEPROM address before the EFUSE copy. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-80934] fix TX DMA mapping leak for AddBA req frames
fix TX DMA mapping leak for AddBA req frames. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-771.
Medium [CVE-2026-80932] flush works in dependency order
flush works in dependency order. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-364. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-80933] validate default EEPROM firmware size
validate default EEPROM firmware size. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-80931] reject an oversize length on an I2C block read
reject an oversize length on an I2C block read. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-80930] disable IRQ on wait timeout
disable IRQ on wait timeout. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-80928] fix cred UAF in smack_file_send_sigiotask
fix cred UAF in smack_file_send_sigiotask(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-80927] Check the return value of tk_get_aux_ts64 in __do_adjtimex
Check the return value of tk_get_aux_ts64 in __do_adjtimex(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-367. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat package: kernel-rt.
Medium [CVE-2026-18495] Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption. The flaw arises from an integer truncation during strip length calculation, resulting in an undersized buffer. Exploitation requires local access and user interaction, such as opening a malicious file. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H). Weakness: CWE-122. Affected Red Hat products: Red Hat Hardened Images. Under investigation: Red Hat Ceph Storage 4; Red Hat Ceph Storage 6; Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat fixing advisory: RHSA-2026:53467.
Medium [CVE-2026-87910] Python tarfile module: Security filter bypass allows arbitrary file write
Python tarfile module: Security filter bypass allows arbitrary file write. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-252. Red Hat lists fixing advisory RHSA-2026:67575 with package python3-14-main-3.14.7-1.2.hum1, python3-13-main-3.13.15-1.2.hum1, python3-11-main-3.11.16-1.3.hum1, python3-12-main-3.12.14-1.2.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-89090] Amazon AWS SDK for Go v2: Denial of Service via crafted event stream header
Amazon AWS SDK for Go v2: Denial of Service via crafted event stream header. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-248. Affected products named by the advisory: AWS Load Balancer Operator; cert-manager Operator for Red Hat OpenShift; Compliance Operator; Confidential Compute Attestation; and 42 more. Affected products named by the advisory: Cryostat 4; Custom Metric Autoscaler operator for Red Hat Openshift; DPU kit for NVIDIA; Exploit Intelligence; and 38 more.