Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skippedCVE-2026-1271015.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: local denial of service through unchecked oauth2 json code type in pam responderCVE-2026-1271005.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversionCVE-2026-1270995.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreCpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnamesCVE-2026-1268315.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)CVE-2026-1218767.9 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeradius: stack buffer overflow via unchecked eap-fast sessionticket lengthCVE-2026-1270307.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeradius: stack-based buffer overflow via unbounded eap-sim identity lengthCVE-2026-1270297.5 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreAnsible.posix: authorized_key module follows a parent-directory symlink allowing writes outside the intended directoryCVE-2026-1266443.9 Low
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helperCVE-2026-91151Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +5 more +7 moreXfsprogs: xfsprogs: local privilege escalation via command injection in xfs_adminCVE-2026-108472Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: denial of service via unbounded fragmented websocket messagesCVE-2026-91150Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 morePodman: untrusted image labels allow auto-update to restart arbitrary systemd unitsCVE-2026-121885Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibstdc++: overflow leaves streambuf in inconsistent state on i/o error.CVE-2026-1257094.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset tableCVE-2026-125707Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsingCVE-2026-125706Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsingCVE-2026-125712Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handlingCVE-2026-125703Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreCockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an optionCVE-2026-1256726.6 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer: gstreamer: use-after-free in gstreamer core buffer value deserializationCVE-2026-125704Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-serviceCVE-2026-122056Public exploit5.9 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 gss-rpc client memory leak on xid mismatch retriesCVE-2026-112314Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error pathsCVE-2026-112321Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switchingCVE-2026-112320Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocationCVE-2026-112319Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointersCVE-2026-112318Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failureCVE-2026-112316Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error pathCVE-2026-112317Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failureCVE-2026-112315Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decodingCVE-2026-119079Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requestsCVE-2026-112323Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanupCVE-2026-112322Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-good: gst-plugins-good: qtdemux out-of-bounds heap read from invalid uncompressed video layoutCVE-2026-125041Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of serviceCVE-2026-125040Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loopCVE-2026-121611Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice indexCVE-2026-121601Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned underflowCVE-2026-119610Fix available8.2 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +3 more +5 moreGst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handlingCVE-2026-121629Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 morePodman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncationCVE-2026-123876Fix available4.4 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +17 more +19 moreAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rceCVE-2026-84503Fix available6.7 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 moreAnsible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)CVE-2026-1230376.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreDbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored busCVE-2026-120749Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailCVE-2026-1231517.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatchCVE-2026-1219978.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression lengthCVE-2026-1219968.2 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tailCVE-2026-1219957.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply lengthCVE-2026-1219948.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimatorCVE-2026-121259Fix available6.5 Medium
- gstreamer gst-plugins-good, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreGst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tagsCVE-2026-119843Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: queue pointer corruption in if_output() leading to denial of serviceCVE-2026-120831Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosureCVE-2026-120830Fix available7.4 High
- Show moreLoading…