Red Hat Linux Security Advisories & CVEs
5810 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-78043] Privilege Escalation via Arbitrary Configuration File Loading
Privilege Escalation via Arbitrary Configuration File Loading. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-22.
Medium [CVE-2026-86315] Out-of-bounds write leads to Denial of Service
Out-of-bounds write leads to Denial of Service. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-787. Affected products named by the advisory: OpenShift Lightspeed; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 8 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift Container Platform 4; Red Hat OpenShift Update Service; and 4 more.
Medium [CVE-2026-82208] Improper certificate validation when using wolfSSL CA cache
With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectly accepted. This issue only affects curl/libcurl built with the wolfSSL TLS backend. Red Hat does not ship wolfSSL as the TLS backend for curl in supported products; shipped curl uses OpenSSL (or historically NSS). Therefore Red Hat products are not affected. Red Hat severity: Moderate — CVSS 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N). Weakness: CWE-295. Red Hat lists Confidential Compute Attestation; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Hardened Images; Red Hat JBoss Core Services; Red Hat OpenShift Container Platform 4; Red Hat OpenShift Dev Spaces; Red Hat Satellite 6 as not affected.
Medium [CVE-2026-19931] Information disclosure via incorrect connection reuse with Negotiate authentication
Information disclosure via incorrect connection reuse with Negotiate authentication. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-488. Red Hat lists fixing advisory RHSA-2026:63161 with package curl-main-8.22.0-0.1.hum1, rust-main-1.98.0-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Confidential Compute Attestation; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; and 9 more. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift Container Platform 4; Red Hat OpenShift Dev Spaces; Red Hat Satellite 6; and 5 more.
Medium [CVE-2026-86253] Arbitrary File Read via Path Traversal
Arbitrary File Read via Path Traversal. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-22. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-86252] Server-Sent Events (SSE) injection via carriage return
Server-Sent Events (SSE) injection via carriage return. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-93. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-86251] Information disclosure via path traversal due to double-decoding flaw
Information disclosure via path traversal due to double-decoding flaw. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-22. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-86205] Open Redirect vulnerability via unsanitized Referer header
Open Redirect vulnerability via unsanitized Referer header. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-601. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-18238] Information disclosure via out-of-bounds read in rpcap client
Information disclosure via out-of-bounds read in rpcap client. Red Hat rates this moderate (CVSS 5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: libpcap.
Medium [CVE-2026-18313] Denial of Service via memory leak in rpcapd
Denial of Service via memory leak in rpcapd. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: libpcap.
Medium [CVE-2026-6554] Denial of Service via infinite loop in BPF interpreter
Denial of Service via infinite loop in BPF interpreter. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: libpcap.
Medium [CVE-2026-6244] Denial of Service via crafted BPF filter program
Denial of Service via crafted BPF filter program. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-369. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: libpcap.
Medium [CVE-2026-31911] Denial of Service via crafted BPF opcode
Denial of Service via crafted BPF opcode. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: libpcap.
Medium [CVE-2026-31912] Denial of service via crafted BPF filter program
Denial of service via crafted BPF filter program. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: libpcap.
Medium [CVE-2026-86144] Information disclosure, SSRF, or denial of service due to improper parseFlags propagation.
Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. Red Hat rates this moderate (CVSS 5.6). Weakness: CWE-669. Red Hat lists fixing advisory RHSA-2026:64463 with package libxml2-0:2.12.5-10.el10_2.4, libxml2-0:2.9.13-14.el9_8.5, libxml2-0:2.9.7-21.el8_10.9, libxml2-main-2.15.4-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
Medium [CVE-2026-86143] Data integrity issues due to integer overflow in write callbacks
Data integrity issues due to integer overflow in write callbacks. Red Hat rates this moderate (CVSS 6.9). Weakness: CWE-192. Red Hat lists fixing advisory RHSA-2026:64463 with package libxml2-0:2.12.5-10.el10_2.4, libxml2-0:2.9.13-14.el9_8.5, libxml2-0:2.9.7-21.el8_10.9, libxml2-main-2.15.4-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
Medium [CVE-2026-86142] Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation
Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation. Red Hat rates this moderate (CVSS 6.9). Weakness: CWE-805. Red Hat lists fixing advisory RHSA-2026:64463 with package libxml2-0:2.12.5-10.el10_2.4, libxml2-0:2.9.13-14.el9_8.5, libxml2-main-2.15.4-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
Medium [CVE-2026-86139] Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution
Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution. Red Hat rates this moderate (CVSS 6.9). Weakness: CWE-190. Red Hat lists fixing advisory RHSA-2026:64463 with package libxml2-main-2.15.4-0.1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-86138] Arbitrary code execution via heap-based buffer overflow
Arbitrary code execution via heap-based buffer overflow. Red Hat rates this moderate (CVSS 6.9). Weakness: CWE-190. Red Hat lists fixing advisory RHSA-2026:64463 with package libxml2-0:2.12.5-10.el10_2.4, libxml2-0:2.9.13-14.el9_8.5, libxml2-0:2.9.7-21.el8_10.9, libxml2-main-2.15.4-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
Medium [CVE-2026-53769] Unauthorized attachment modification via authorization bypass
Unauthorized attachment modification via authorization bypass. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-639. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift GitOps; and 2 more. Affected products named by the advisory: Red Hat OpenStack Platform 18.0; Red Hat package: golang.