Red Hat Linux Security Advisories & CVEs
11398 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-92940] vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent
vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent. Red Hat rates this important (CVSS 8.3). Weakness: CWE-668. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-92937] vm2 3.11.6 Remote Code Execution via Promise call/apply
vm2 3.11.6 Remote Code Execution via Promise call/apply. Red Hat rates this important (CVSS 8.3). Weakness: CWE-94. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-77874] SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass
SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass. Red Hat rates this important (CVSS 8.6). Weakness: CWE-89. Affected products named by the advisory: Cryostat 4; Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat JBoss Enterprise Application Platform 7; and 4 more. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat OpenStack Platform 13 (Queens); Red Hat Satellite 6; Red Hat Single Sign-On 7.
High [CVE-2026-89418] Denial of Service via uncontrolled recursion in protobuf group field parsing
Denial of Service via uncontrolled recursion in protobuf group field parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
High [CVE-2026-87743] Authorization Bypass via Path Normalization Discrepancy in Quarkus HTTP Security
Authorization Bypass via Path Normalization Discrepancy in Quarkus HTTP Security. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat Build of Keycloak; and 2 more. Affected products named by the advisory: Red Hat Fuse 7; Red Hat OpenShift Dev Spaces.
High [CVE-2026-92925] Out-of-bounds read via crafted cluster bus packets
Out-of-bounds read via crafted cluster bus packets. Red Hat rates this important (CVSS 7.1). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:65120 with package redis:7-9060020260917140656.9, redis:7-9080020260821173335.9, redis:7-9040020260917140622.9. Affected products named by the advisory: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Pen Drive Powered by Red Hat Lightspeed; Red Hat 3scale API Management Platform 2; and 1 more. Affected products named by the advisory: Red Hat Hardened Images.
High [CVE-2026-86320] Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder. Red Hat Product Security has rated this flaw as having an Important security impact. Exploitation requires the target build process to process an attacker-controlled or otherwise untrusted source using this option. In typical interactive builds, user interaction is required to initiate the build, while automated build services that process untrusted manifests may be exposed without additional user interaction. Successful exploitation provides code execution with the privileges of the flatpak-builder process and may allow access to or modification of data available to that process. Red Hat severity: Important — CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Weakness: CWE-94. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: flatpak-builder.
High [CVE-2026-90227] check SUBMIT_IO with nvme_cmd_allowed
In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls nvme_cmd_allowed(). Unprivileged callers can thus issue I/O on a partition device or write through a read-only file descriptor. Pass flags and open_for_write through and reject disallowed commands with -EACCES. A flaw was found in the Linux kernel's NVMe (Non-Volatile Memory Express) input/output control (ioctl) handling. An unprivileged local user could exploit this vulnerability by bypassing access checks in the `NVME_IOCTL_SUBMIT_IO` function. Red Hat severity: Important — CVSS 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-266. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4. Red Hat lists Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7 as not affected. Red Hat fixing advisory: RHSA-2026:75746, RHSA-2026:75747. Affected products named by the advisory: Red Hat package: kernel-rt.
High [CVE-2026-90236] Release the export reference when reaping open stateids
Release the export reference when reaping open stateids. Red Hat rates this moderate (CVSS 7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
High [CVE-2026-90315] Add lockdown checks to legacy I/O and memory handlers
Add lockdown checks to legacy I/O and memory handlers. Red Hat rates this important (CVSS 7). Weakness: CWE-414. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-90111] do not clone dst in ip6mr_cache_report
do not clone dst in ip6mr_cache_report(). Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
Medium [CVE-2026-93451] Buffer overflow via malformed compressed input
Buffer overflow via malformed compressed input. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-131. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; and 8 more. Affected products named by the advisory: Red Hat build of Quarkus; Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; Red Hat Fuse 7; and 4 more.
Medium [CVE-2026-93380] Race condition in FileSystem
Race condition in FileSystem. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-367.
Medium [CVE-2026-93387] Cross-origin data disclosure via improper state validation
Cross-origin data disclosure via improper state validation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat package: webkitgtk4; Red Hat package: webkit2gtk3.
Medium [CVE-2026-86049] Information disclosure via 5xx request logging
Information disclosure via 5xx request logging. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-117. Affected products named by the advisory: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-44235] Denial of Service via AMQP frame length underflow
Denial of Service via AMQP frame length underflow. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: librabbitmq.
Medium [CVE-2026-44236] Heap buffer overflow leading to denial of service
Heap buffer overflow leading to denial of service. Red Hat rates this important (CVSS 6.5). Weakness: CWE-131. Red Hat lists fixing advisory RHSA-2026:75582 with package librabbitmq-0:0.9.0-6.el8_10. Affected product named by the advisory: Red Hat Enterprise Linux 8.
Medium [CVE-2026-8674] glibc DNS stub resolver: Denial of Service via long search domain in configuration
glibc DNS stub resolver: Denial of Service via long search domain in configuration. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1025. Red Hat lists fixing advisory RHSA-2026:69276 with package glibc-main-2.43-8.6.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: glibc.
Medium [CVE-2026-85718] Denial of Service via TLS handshake failure
Denial of Service via TLS handshake failure. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-772. Affected product named by the advisory: Red Hat Fuse 7.
Medium [CVE-2026-85999] Denial of Service via crafted CSS selectors
Denial of Service via crafted CSS selectors. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-1333. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; Migration Toolkit for Applications 8; OpenShift Lightspeed; and 6 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4; Red Hat OpenShift Virtualization 4; and 2 more.