Skip to contentRed Hat Enterprise Linux vulnerabilities
- red hat enterprise linux 10Dbus: server accept watch can be stalled by blocking nonce-tcp accept_with_noncefile pathCVE-2026-1288866.2 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreAbrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environCVE-2026-1103305.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreAbrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count elementCVE-2026-1103317.8 High
- red hat enterprise linux 10Dbus: infinite cpu-spin loop in libdbus socket transport when epipe is received during write operationsCVE-2026-1289876.2 Medium
- red hat enterprise linux 10Dbus: stack out-of-bounds write in dbus _dbus_poll() select() fallback when file descriptor exceeds fd_setsizeCVE-2026-1288855.5 Medium
- red hat enterprise linux 10Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: path traversal via unsanitized repo name in addrepo/removerepoCVE-2026-18379Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skippedCVE-2026-1271015.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: local denial of service through unchecked oauth2 json code type in pam responderCVE-2026-1271005.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversionCVE-2026-1270995.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreCpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnamesCVE-2026-1268315.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)CVE-2026-1218767.9 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeradius: stack buffer overflow via unchecked eap-fast sessionticket lengthCVE-2026-1270307.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeradius: stack-based buffer overflow via unbounded eap-sim identity lengthCVE-2026-1270297.5 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreAnsible.posix: authorized_key module follows a parent-directory symlink allowing writes outside the intended directoryCVE-2026-1266443.9 Low
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helperCVE-2026-91151Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +5 more +7 moreXfsprogs: xfsprogs: local privilege escalation via command injection in xfs_adminCVE-2026-108472Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: denial of service via unbounded fragmented websocket messagesCVE-2026-91150Fix available7.5 High
- openprinting pappl-retrofit, red hat enterprise linux 10 +1 morePappl-retrofit: directory traversal in the add-ppdfiles and delete-ppdfiles actionsCVE-2026-1237477.3 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: out-of-bounds read in volume_id_get_buffer() via an offset+length wraparoundCVE-2026-1247465.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: cpio hardlink target not sanitized under feature_path_traversal_protectionCVE-2026-1247446.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: divide-by-zero and heap over-read in the volume_id hfs+ proberCVE-2026-1247435.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: divide-by-zero in the volume_id fat prober via a zero sectors_per_cluster valueCVE-2026-1247425.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: use-after-free of requested_ipv6 in udhcpc6CVE-2026-1247404.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: httpd password rule bypass for pre-compressed .gz files via accept-encoding: gzipCVE-2026-1247385.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()CVE-2026-1247417.6 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.confCVE-2026-1247397.5 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: heap buffer overflow in the tftp client on fallback to the default block sizeCVE-2026-1247377.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 morePodman: untrusted image labels allow auto-update to restart arbitrary systemd unitsCVE-2026-121885Fix available6.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file sizeCVE-2026-1247477.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibstdc++: overflow leaves streambuf in inconsistent state on i/o error.CVE-2026-1257094.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset tableCVE-2026-125707Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsingCVE-2026-125706Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsingCVE-2026-125712Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handlingCVE-2026-125703Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreCockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an optionCVE-2026-1256726.6 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer: gstreamer: use-after-free in gstreamer core buffer value deserializationCVE-2026-125704Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-serviceCVE-2026-122056Public exploit5.9 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 gss-rpc client memory leak on xid mismatch retriesCVE-2026-112314Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error pathsCVE-2026-112321Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switchingCVE-2026-112320Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocationCVE-2026-112319Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointersCVE-2026-112318Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failureCVE-2026-112316Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error pathCVE-2026-112317Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failureCVE-2026-112315Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decodingCVE-2026-119079Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requestsCVE-2026-112323Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanupCVE-2026-112322Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-good: gst-plugins-good: qtdemux out-of-bounds heap read from invalid uncompressed video layoutCVE-2026-125041Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of serviceCVE-2026-125040Fix available6.5 Medium
- Show moreLoading…