Skip to contentRed Hat Enterprise Linux vulnerabilities
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: missing slot-range validation permits out-of-gap device i/oCVE-2026-1115556.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap oob read/write via unchecked migration data offsetsCVE-2026-105958Fix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncationCVE-2026-105959Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassCVE-2026-104715Public exploitFix available7.8 High
- red hat enterprise linux 8, enterprise linux 9, fuse 7 +4 more +6 moreOrg.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor roleCVE-2026-848237.1 High
- gnome evolution-data-server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEvolution-data-server: local file disclosure via attach file:// urisCVE-2026-1107775.7 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-cryptoCVE-2026-86849Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: stack and heap buffer overflow in nfp vdpa driverCVE-2026-86856Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanupCVE-2026-86847Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-cryptoCVE-2026-86846Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupCVE-2026-86845Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)CVE-2026-86566Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoCVE-2026-86848Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapCVE-2026-86567Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: heap out-of-bounds read/write in gso header copyCVE-2026-100236Fix available8.6 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeCVE-2026-86565Fix available8.2 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: double offset bug in vhost log mapping calculationCVE-2026-86563Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)CVE-2026-86562Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: missing memory size validation before mmap in vhost memory region setupCVE-2026-86561Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctouCVE-2026-93683Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable fileCVE-2026-109968Fix available5.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directoryCVE-2026-1247456.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolCVE-2026-109971Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin written to world-readable fileCVE-2026-109970Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umaskCVE-2026-109969Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp charactersCVE-2026-1002316.1 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +3 more +5 moreGstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserializeCVE-2026-86476Public exploitFix available8.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indicesCVE-2026-1100363.3 Low
- red hat enterprise linux 6, hardened images +1 moreBusybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of serviceCVE-2026-88833Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()CVE-2026-105460Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connectionCVE-2026-109976Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreGnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of serviceCVE-2026-1098335.9 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreGnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)CVE-2026-109832Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decodingCVE-2026-109854Fix available2.5 Low
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreMutter: mutter: client-triggered use-after-free in wayland color-management icc image description pathCVE-2026-108094Fix available7.8 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fixCVE-2026-108119Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loadingCVE-2026-108093Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entryCVE-2026-1080635.5 Medium
- red hat build of podman desktop, certification program for red hat enterprise linux 9, edge manager 1 +8 more +10 moreGvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposeCVE-2026-107935Fix available9.3 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreCups: null pointer dereference via embedded job ticket comments allows remote denial of serviceCVE-2026-107655Fix available4.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eog: arbitrary code execution via heap buffer overflow in png metadata readerCVE-2026-107651Fix available5.5 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +15 more +17 moreAnsible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionCVE-2026-89091Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruptionCVE-2026-107565Fix available5.1 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreFlatpak-builder: local file exfiltration via `fileCVE-2026-107466Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreCyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clientsCVE-2026-107161Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in hot color filter on oversized imageCVE-2026-106067Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in raw data export on oversized image dimensionsCVE-2026-106066Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap buffer overflow in pcx export on oversized image dimensionsCVE-2026-106065Fix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: null-pointer write in read_mtext_element() on malformed utf-8CVE-2026-1071696.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: heap use-after-free write in re_init_ic()CVE-2026-1071676.2 Medium
- Show moreLoading…