Skip to contentRed Hat Enterprise Linux vulnerabilities
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassCVE-2026-14476Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationCVE-2026-14474Fix available8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: integer overflow in read_rle_channel()CVE-2026-58384Fix available7.3 High
- 389ds 389-ds-base, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8 +21 more +23 more389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindCVE-2026-11610Fix available8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via integer overflow in playstation tim loaderCVE-2026-59089Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: stack buffer overflow in pnmscanner_gettoken()CVE-2026-58380Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +8 more +10 moreGimp: gimp: heap buffer overflow in read_channel_data()CVE-2026-58379Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorizationCVE-2026-146124.2 Medium
- hp hplip, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHplip: incomplete fix for cve-2026-8631CVE-2026-14544Fix available9.8 Critical
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: double-free in read_layer_block()CVE-2026-58381Fix available6.1 Medium
- red hat confidential compute attestation, ansible automation platform 2, ansible automation platform 2.6 for rhel 9 +12 more +14 moreSequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionCVE-2026-42784Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +4 more +6 morePipewire: pulse server alloca stack overflowCVE-2026-14330Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +3 more +5 morePipewire: raop rtsp null derefCVE-2026-14324Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: heap buffer overflow in ndb slot table parsingCVE-2026-44605Fix available5.5 Medium
- red hat enterprise linux 10Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handlingCVE-2026-14258Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CVE-2026-58016Fix available7.5 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +35 more +37 moreGlib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveCVE-2026-58015Fix available5.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"CVE-2026-58014Fix available7.3 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"CVE-2026-58013Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()CVE-2026-58012Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeCVE-2026-58011Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()CVE-2026-58010Fix available6.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreSssd: use-after-free crash in sssd' 'sssd_pam' processCVE-2026-12610Fix available6.4 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreLibarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()CVE-2026-14164Fix available7.5 High
- p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingCVE-2026-13757Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +17 more +19 moreLibtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageCVE-2026-12912Fix available7.3 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +49 more +51 morefast-uri vulnerable to host confusion via failed IDN canonicalizationCVE-2026-13676Fix available7.5 High
- attr project attr, red hat cert manager support for red hat openshift release 1.19, discovery 2 +8 more +10 moreattr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattrCVE-2026-54371Fix available8.4 High
- acl project acl, red hat discovery 2, enterprise linux 10 +11 more +13 moreacl < 2.4.0 Symlink Traversal Privilege Escalation via libacl FunctionsCVE-2026-54369Fix available8.4 High
- gnome yelp, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreYelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applicationsCVE-2026-13601Fix available7.1 High
- kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +10 more +12 moreUtil-linux: util-linux: heap use-after-free in libblkid nested partition probingCVE-2026-13595Fix available6.8 Medium
- spice-space spice-vdagent, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSpice-vdagent: path traversal in file transfer via unsanitized filenameCVE-2026-57966Fix available4.4 Medium
- spice-space spice-vdagent, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSpice-vdagent: integer overflow in udscs_write() leading to heap buffer overflowCVE-2026-57965Fix available5.1 Medium
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +6 more +8 moreFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()CVE-2026-58049Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morevfio/pci: Clean up DMABUFs before disabling functionCVE-2026-53322Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreiommu/vt-d: Avoid NULL pointer dereference or refcount corruptionCVE-2026-53281Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulationCVE-2026-53277Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Add buffer overflow check in MS get_info_ioctlCVE-2026-53203Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Fix signed integer truncation in IPC receiveCVE-2026-53202Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreUSB: serial: io_ti: fix heap overflow in get_manuf_info()CVE-2026-53196Fix available6.8 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreUSB: serial: kl5kusb105: fix bulk-out buffer overflowCVE-2026-53194Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morezram: fix use-after-free in zram_bvec_write_partial()CVE-2026-53185Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreIB/isert: Reject login PDUs shorter than ISER_HEADERS_LENCVE-2026-53176Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreinet: frags: fix use-after-free caused by the fqdir_pre_exit() flushCVE-2026-53175Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moremm/list_lru: drain before clearing xarray entry on reparentCVE-2026-53153Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morethunderbolt: Clamp XDomain response data copy to allocation sizeCVE-2026-53148Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moredrm/gem: Try to fix change_handle ioctl, attempt 4CVE-2026-53145Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11CVE-2026-53143Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: Fix linked reg delta tracking when src_reg == dst_regCVE-2026-53092Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet: pull headers in qdisc_pkt_len_segs_init()CVE-2026-53091Fix available8.4 High
- Show moreLoading…