Red Hat Linux Security Advisories & CVEs
5187 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-98164] Check write tracking in all address spaces
Check write tracking in all address spaces. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2026-102277] Denial of Service via crafted brace patterns
Denial of Service via crafted brace patterns. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-606. Red Hat lists fixing advisory RHSA-2026:74168 with package nodejs22-main-10.9.9-1.22.23.3.2.3.2.2.hum1, nodejs26-main-11.19.1-1.26.10.0.0.3.hum1, nodejs24-main-11.19.0-1.24.21.0.1.2.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-102265] Denial of Service via deeply nested token headers
Denial of Service via deeply nested token headers. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-248. Affected products named by the advisory: Confidential Compute Attestation; Fence Agents Remediation Operator; Lightspeed Core; Migration Toolkit for Applications 8; and 14 more. Affected products named by the advisory: OpenShift Lightspeed; Red Hat AI Inference Server; Red Hat Ansible Automation Platform 2; Red Hat Ceph Storage 4; and 10 more.
Medium [CVE-2026-102275] Token verification bypass via mismatched OKP key components
Token verification bypass via mismatched OKP key components. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-347. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Confidential Compute Attestation; Fence Agents Remediation Operator; Lightspeed Core; and 18 more. Affected products named by the advisory: Migration Toolkit for Applications 8; OpenShift Lightspeed; Red Hat AI Inference Server; Red Hat Ansible Automation Platform 2; and 14 more.
Medium [CVE-2026-102274] Denial of Service via malformed RSA key in JWK set
Denial of Service via malformed RSA key in JWK set. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-248.
Medium [CVE-2026-102270] Denial of Service via regular expression backtracking in is_pem_format
Denial of Service via regular expression backtracking in is_pem_format. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-1333.
Medium [CVE-2026-102269] Token revocation bypass via non-canonical signature decoding
Token revocation bypass via non-canonical signature decoding. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-1286.
Medium [CVE-2026-101918] Denial of Service via deeply nested JSON token payload
Denial of Service via deeply nested JSON token payload. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-248.
Medium [CVE-2026-101917] Denial of Service via outbound request amplification on unknown key identifiers
Denial of Service via outbound request amplification on unknown key identifiers. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-408.
Medium [CVE-2026-101913] Security bypass via incomplete IPv6 link-local address validation
Security bypass via incomplete IPv6 link-local address validation. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-184. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101912] Access control bypass via cross-family subnet comparison
Access control bypass via cross-family subnet comparison. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1024. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101911] Denial of Service via unbounded IPv6 address parsing
Denial of Service via unbounded IPv6 address parsing. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101910] Security boundary bypass via unclassified NAT64 local-use address range
Security boundary bypass via unclassified NAT64 local-use address range. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-184. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101101] Denial of Service via uncaught JSON parsing exception
Denial of Service via uncaught JSON parsing exception. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-248. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101908] Outbound HTTP request manipulation via fetch adapter prototype pollution
Outbound HTTP request manipulation via fetch adapter prototype pollution. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-628. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101907] Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter
Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-918. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101100] @ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup
@ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-459.
Medium [CVE-2026-101904] HTTP header injection via inherited prototype properties
HTTP header injection via inherited prototype properties. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101902] Unintended HTTP method override via prototype pollution gadget
Unintended HTTP method override via prototype pollution gadget. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-454. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101900] Outbound HTTP header injection via prototype pollution in fetch adapter
Outbound HTTP header injection via prototype pollution in fetch adapter. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1287. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.