Skip to contentRed Hat Enterprise Linux vulnerabilities
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: Fix ld_{abs,ind} failure path analysis in subprogsCVE-2026-53090Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: fix mm lifecycle in open-coded task_vma iteratorCVE-2026-53085Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalarsCVE-2026-53081Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 moreBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rspCVE-2026-53071Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moredm log: fix out-of-bounds write due to region_count overflowCVE-2026-53059Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf, sockmap: Take state lock for af_unix iterCVE-2026-53033Fix available7.8 High
- linux, linux kernel, red hat codeready linux builder eus (v.9.6) +40 more +42 morecrypto: ccp - copy IV using skcipher ivsizeCVE-2026-53016Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreice: fix double-free of tx_buf skbCVE-2026-53009Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: fix possible UAF in icmpv6_rcv()CVE-2026-53006Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morenetfilter: conntrack: remove sprintf usageCVE-2026-53002Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morenetfilter: nat: use kfree_rcu to release opsCVE-2026-53000Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moretipc: fix double-free in tipc_buf_append()CVE-2026-52993Public exploitFix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresched/psi: fix race between file release and pressure writeCVE-2026-52991Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callersCVE-2026-52989Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/amdgpu: avoid double drm_exec_fini() in userq validateCVE-2026-52987Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()CVE-2026-52976Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morefutex: Drop CLONE_THREAD requirement for private default hash allocCVE-2026-52973Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morecrypto: af_alg - Cap AEAD AD length to 0x80000000CVE-2026-52972Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreKVM: Reject wrapped offset in kvm_reset_dirty_gfn()CVE-2026-52969Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morelibceph: Fix potential out-of-bounds access in crush_decode()CVE-2026-52955Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreiommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to resetCVE-2026-52952Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/dma-buf: handle empty bo and UAF racesCVE-2026-52951Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/dma-buf: fix UAF with retry loopCVE-2026-52950Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morenet: skbuff: fix missing zerocopy reference in pskb_carve helpersCVE-2026-52943Public exploitFix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresctp: purge outqueue on stale COOKIE-ECHO handlingCVE-2026-52924Public exploitFix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipc: limit next_id allocation to the valid ID rangeCVE-2026-52923Public exploitFix available7.8 High
- fasterxml jackson-databind, red hat cryostat 4 on rhel 9, openshift developer tools and services +44 more +46 morejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)CVE-2026-54513Fix available8.1 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parserCVE-2026-12892Fix available4.4 Medium
- gstreamer, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parserCVE-2026-12891Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreCommunity.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query stringCVE-2026-118206.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreCommunity.general: community.general keyring_info — os keyring passphrase returned in plaintextCVE-2026-118195.5 Medium
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreDnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validationCVE-2026-12969Fix available5.3 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +8 more +10 moreOpenssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel terminationCVE-2026-55654Fix available3.7 Low
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +21 more +23 moreOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionsCVE-2026-55655Fix available5.0 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +23 more +25 moreOpenssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of serviceCVE-2026-55653Fix available4.3 Medium
- red hat enterprise linux 7An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers...CVE-2025-61028Fix available7.5 High
- red hat enterprise linux 7An issue in the st_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to...CVE-2025-61023Fix available7.5 High
- red hat enterprise linux 7An issue in the sqlo_strip_in_join component of openlink virtuoso-opensource v7.2.11 allows...CVE-2025-61020Fix available7.5 High
- red hat enterprise linux 7An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows...CVE-2025-61018Fix available7.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserverCVE-2026-12549Fix available4.8 Medium
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey repliesCVE-2026-12725Fix available5.9 Medium
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesCVE-2026-56211Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idCVE-2026-56210Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackCVE-2026-56209Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreLibaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modeCVE-2026-56208Fix available7.6 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morebpf: Free reuseport cBPF prog after RCU grace period.CVE-2026-52910Public exploitFix available7.8 High
- red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +1 moreFfmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()CVE-2026-12706Fix available6.5 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()CVE-2026-117915.0 Medium
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +2 more +4 moreHeap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoderCVE-2026-8461Public exploitFix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreDracut: dracut: root code execution via dhcp options command injection in networkmanager initrd moduleCVE-2026-16445Fix available7.5 High
- Show moreLoading…