Red Hat Linux Security Advisories & CVEs
3067 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-46056] fix potential UAF in SSP passkey handlers
fix potential UAF in SSP passkey handlers. Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-413. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:27288 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1.
High [CVE-2026-44209] Remote Code Execution via Server-Side Template Injection
Remote Code Execution via Server-Side Template Injection. Red Hat rates this important (CVSS 7.5). Weakness: CWE-917. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: OpenShift Lightspeed; Red Hat Ansible Automation Platform 2.
High [CVE-2026-48863] Stack-based buffer overflow in libsolv EdDSA PGP signature verification allows denial of service
Stack-based buffer overflow in libsolv EdDSA PGP signature verification allows denial of service. Red Hat rates this important (CVSS 7.5). Weakness: CWE-121. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-48864] Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious.solv page data. Red Hat rates this moderate (CVSS 7.8). Weakness: CWE-787. Affected package(s): libsolv, libsolv-main. Resolved in Red Hat advisory RHSA-2026:28236 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat Update Infrastructure 5; Red Hat Discovery 2; and 13 more.
High [CVE-2026-40033] Remote code execution via heap-buffer-overflow in gdi_CacheToSurface
Remote code execution via heap-buffer-overflow in gdi_CacheToSurface. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-9538] Denial of Service via crafted tar header with large entry size
Denial of Service via crafted tar header with large entry size. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-42496] Path traversal via crafted symlinks allows arbitrary file access
Path traversal via crafted symlinks allows arbitrary file access. Red Hat rates this important (CVSS 8.2). Weakness: CWE-22. Affected package(s): perl:5.32, perl-Archive-Tar. Resolved in Red Hat advisory RHSA-2026:30852 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-3238] Denial of service against AD DC WINS server
Denial of service against AD DC WINS server. Red Hat rates this important (CVSS 7.5). Weakness: CWE-476. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-46243] Linux kernel: smb: client: reject userspace cifs.spnego descriptions
Linux kernel: smb: client: reject userspace cifs.spnego descriptions. Red Hat rates this important (CVSS 7.8). Weakness: CWE-825. Affected package(s): kernel, kernel-rt, rhcos, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:33219 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Enterprise Linux 7 Extended Lifecycle Support; and 19 more.
High [CVE-2026-14164] Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()
Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack(). Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-415. Affected package(s): libarchive-main. Resolved in Red Hat advisory RHSA-2026:30333 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 9; Red Hat Update Infrastructure 5; Red Hat Discovery 2; and 2 more.
High [CVE-2026-43503] propagate shared-frag marker through frag-transfer helpers
propagate shared-frag marker through frag-transfer helpers. Red Hat rates this important (CVSS 7). Weakness: CWE-664. Affected package(s): rhcos, kernel-rt, kernel, kpatch-patch. Resolved in Red Hat advisory RHSA-2026:23470 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NVIDIA for RHEL 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 17 more.
High [CVE-2026-27136] Cross-Site Scripting via HTML parsing bypass
Cross-Site Scripting via HTML parsing bypass. Red Hat rates this important (CVSS 8.1). Weakness: CWE-79. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-39821] Privilege escalation via incorrect Punycode label processing
Privilege escalation via incorrect Punycode label processing. Red Hat rates this important (CVSS 8.2). Weakness: CWE-1289. Affected package(s): rhacm2/observatorium-rhel9:1782157471, rhacm2/prometheus-alertmanager-rhel9:1782156920, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519, rhacm2/thanos-rhel9:1782465412, rhacm2/grafana-dashboard-loader-rhel9:1782383255, rhacm2/acm-prometheus-config-reloader-rhel9:1782157632. Resolved in Red Hat advisory RHSA-2026:35830 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift Container Platform 4.22; RHEM 1.0 for RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); and 117 more.
High [CVE-2026-25681] Arbitrary code execution via Cross-Site Scripting
Arbitrary code execution via Cross-Site Scripting. Red Hat rates this important (CVSS 8.1). Weakness: CWE-79. Affected package(s): opentelemetry-collector, cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9:1782839193, cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9:1782839981, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519, cluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539, cluster-observability-operator/monitoring-console-plugin-rhel9:1782838476. Resolved in Red Hat advisory RHSA-2026:34342 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2026-9256] code execution and denial of service
code execution and denial of service. Red Hat rates this important (CVSS 8.1). Weakness: CWE-122. Affected package(s): nginx, nginx:1.26, nginx-main, nginx:1.24, discovery/discovery-ui-rhel9:1782756541. Resolved in Red Hat advisory RHSA-2026:29874 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: NGINX Plus; NGINX Open Source; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 5 more.
High [CVE-2026-9277] Arbitrary code execution via command injection due to unescaped line terminators
Arbitrary code execution via command injection due to unescaped line terminators. Red Hat rates this important (CVSS 8.1). Weakness: CWE-78. Affected package(s): openshift4/ose-console-rhel9:1782308675, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9:1782839981, openshift-service-mesh/kiali-rhel9:1780916345, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519, quay/quay-rhel8:1781878070. Resolved in Red Hat advisory RHSA-2026:26077 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat Developer Hub 1.10; Red Hat Developer Hub 1.9; Red Hat Discovery 2; and 27 more.
High [CVE-2026-44417] Remote Code Execution via untrusted JMS configuration
Remote Code Execution via untrusted JMS configuration. Red Hat rates this important (CVSS 7.5). Weakness: CWE-15. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat JBoss Enterprise Application Platform 8.
High [CVE-2026-44930] org.apache.cxf.services.xkms/cxf-services-xkms-x509-repo-ldap: Apache CXF: Information Disclosure via LDAP Injection
org.apache.cxf.services.xkms/cxf-services-xkms-x509-repo-ldap: Apache CXF: Information Disclosure via LDAP Injection. Red Hat rates this important (CVSS 7.5). Weakness: CWE-90. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform Expansion Pack.
High [CVE-2026-39829] Denial of Service via crafted public key with excessive parameters
Denial of Service via crafted public key with excessive parameters. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1284. Affected package(s): advanced-cluster-security/rhacs-roxctl-rhel8:1781686458, advanced-cluster-security/rhacs-roxctl-rhel8:1781686446, buildah. Resolved in Red Hat advisory RHSA-2026:29455 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: RHEM 1.0 for RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux AppStream (v. 9); and 51 more.
High [CVE-2026-39830] Denial of Service via resource leak from unsolicited SSH responses
Denial of Service via resource leak from unsolicited SSH responses. Red Hat rates this important (CVSS 7.5). Weakness: CWE-772. Affected package(s): buildah. Resolved in Red Hat advisory RHSA-2026:29455 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: RHEM 1.0 for RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux AppStream (v. 9); and 51 more.