Red Hat Linux Security Advisories & CVEs
11399 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-63349] Privilege retention in child processes due to incorrect group handling
Privilege retention in child processes due to incorrect group handling. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-648. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Confidential Compute Attestation; Exploit Intelligence; Lightspeed Core; and 11 more. Affected products named by the advisory: Migration Toolkit for Applications 8; Migration Toolkit for Containers; OpenShift Lightspeed; Red Hat AI Inference Server; and 7 more.
Medium [CVE-2026-91147] Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash
Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Dev Spaces; Red Hat package: cockpit.
Medium [CVE-2026-77301] Denial of Service via uncontrolled memory allocation
Denial of Service via uncontrolled memory allocation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Developer Hub; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 6 more. Affected products named by the advisory: Red Hat Fuse 7; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4; Self-service automation portal 2; and 2 more.
Medium [CVE-2026-93579] HTTP/2 header field values are not validated by default (CR/LF/NUL passthrough)
HTTP/2 header field values are not validated by default (CR/LF/NUL passthrough). Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1035. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; and 3 more. Affected products named by the advisory: Red Hat Build of Keycloak; Red Hat Data Grid 8; Red Hat JBoss Enterprise Application Platform 8.
Medium [CVE-2026-93685] possible unauthenticated debug/metrics endpoint via cmdfactory.NewControllerCommandConfig (confirmed exposed by engineering)
possible unauthenticated debug/metrics endpoint via cmdfactory. NewControllerCommandConfig (confirmed exposed by engineering). Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-200. Affected product named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.
Medium [CVE-2026-93573] Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling
Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-444. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat AMQ Clients; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 8 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat Data Grid 8; and 4 more.
Medium [CVE-2026-85511] parameter injection in EAP's elytron oauth2
parameter injection in EAP's elytron oauth2. Red Hat rates this low (CVSS 4.2). Weakness: CWE-290. Red Hat lists fixing advisory RHSA-2026:70229 with package eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el8eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el10eap. Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat Data Grid 8; and 2 more. Affected products named by the advisory: Red Hat Fuse 7; Red Hat Single Sign-On 7.
Medium [CVE-2026-10832] org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload
org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:70229 with package eap8-jackson-annotations-0:2.18.9-1.redhat_00003.1.el10eap, eap8-jbossws-cxf-0:7.4.0-1.Final_redhat_00001.1.el8eap, eap8-wildfly-0:8.1.8-9.GA_redhat_00006.1.el9eap, eap8-parsson-0:1.1.9-1.redhat_00001.1.el10eap. Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat build of Apache Camel 4 for Quarkus 3; and 10 more. Affected products named by the advisory: Red Hat build of Apache Camel - HawtIO 4; Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat build of Quarkus; and 6 more.
Medium [CVE-2026-93566] HTTP Request Smuggling due to control characters in the chunk-size line
HTTP Request Smuggling due to control characters in the chunk-size line. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1035. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat AMQ Clients; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 8 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat Data Grid 8; and 4 more.
Medium [CVE-2026-93653] unbounded CPU loop in SplashOutputDev::tilingPatternFill via unvalidated tiling-pattern repeat count (denial of service)
unbounded CPU loop in SplashOutputDev::tilingPatternFill via unvalidated tiling-pattern repeat count (denial of service). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-606. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: poppler; Red Hat package: compat-poppler022.
Medium [CVE-2026-93602] Certificate Revocation Check Bypass via Faulty CRL Logic
Certificate Revocation Check Bypass via Faulty CRL Logic. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-295. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Confidential Cluster Operator; Confidential Compute Attestation; Logging Subsystem for Red Hat OpenShift; and 32 more. Affected products named by the advisory: Migration Toolkit for Applications 8; OpenShift Lightspeed; OpenShift Service Mesh 3; Pen Drive Powered by Red Hat Lightspeed; and 28 more.
Medium [CVE-2026-93589] Denial of Service via division by zero in FLIF encoder
Denial of Service via division by zero in FLIF encoder. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Medium [CVE-2026-93492] HTTP/2 HpackEncoder DoS with large table size
HTTP/2 HpackEncoder DoS with large table size. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1035. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; and 3 more. Affected products named by the advisory: Red Hat Build of Keycloak; Red Hat Data Grid 8; Red Hat JBoss Enterprise Application Platform 8.
Medium [CVE-2026-93578] Missing Extended Key Usage (EKU) check in OCSP Client allows certificate revocation bypass
Missing Extended Key Usage (EKU) check in OCSP Client allows certificate revocation bypass. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-1035. Affected product named by the advisory: Red Hat build of Apache Camel for Spring Boot 4.
Medium [CVE-2026-93314] Remote integer overflow vulnerability
Remote integer overflow vulnerability. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-190. Red Hat lists fixing advisory RHSA-2026:58482 with package poppler-main-26.08.0-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-93313] Remote integer overflow vulnerability
Remote integer overflow vulnerability. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-190. Red Hat lists fixing advisory RHSA-2026:71625 with package poppler-main-26.08.0-1.1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-93312] Denial of Service via null pointer dereference in JBIG2Stream::rewind function
Denial of Service via null pointer dereference in JBIG2Stream::rewind function. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-476. Red Hat lists fixing advisory RHSA-2026:58482 with package poppler-main-26.08.0-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-93311] Denial of service via integer overflow in SampledFunction
Denial of service via integer overflow in SampledFunction. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-190. Affected product named by the advisory: Red Hat Hardened Images.
Low [CVE-2026-93841] Memory corruption via unvalidated prompt token IDs
Memory corruption via unvalidated prompt token IDs. Red Hat rates this low (CVSS 3.7). Weakness: CWE-787. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
Low [CVE-2026-91142] Integer overflow in `do_lastlog ` offset calculation can misaddress `lastlog` entries on ILP32 builds
Integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ILP32 builds. Red Hat rates this low (CVSS 3.6). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit.