Skip to contentRed Hat Enterprise Linux 9.8 Extended Update Support vulnerabilities
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helperCVE-2026-91151Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +5 more +7 moreXfsprogs: xfsprogs: local privilege escalation via command injection in xfs_adminCVE-2026-108472Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: denial of service via unbounded fragmented websocket messagesCVE-2026-91150Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 gss-rpc client memory leak on xid mismatch retriesCVE-2026-112314Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error pathsCVE-2026-112321Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switchingCVE-2026-112320Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocationCVE-2026-112319Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointersCVE-2026-112318Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failureCVE-2026-112316Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error pathCVE-2026-112317Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failureCVE-2026-112315Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decodingCVE-2026-119079Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requestsCVE-2026-112323Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanupCVE-2026-112322Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: stack buffer overflow in psd image resource header loaderCVE-2026-119528Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +4 more +6 moreGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of serviceCVE-2026-103963Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePatch: filename validation bypass in reversal fallback allows file creation outside the working directoryCVE-2026-115207Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreGnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)CVE-2026-109832Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +8 more +10 moreGcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_ifCVE-2026-102010Fix available7.0 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 8 +2 more +4 moreGnome-remote-desktop: gnome-remote-desktop: unauthenticated rdp sockets lack a handshake deadlineCVE-2026-96541Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreGcc: libstdc++ integer overflow in `new` operatorCVE-2026-95619Fix available7.7 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 morePodman: arbitrary file write when importing oci archiveCVE-2025-11395Fix available5.5 Medium
- kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +10 more +12 moreUtil-linux: util-linux: heap use-after-free in libblkid nested partition probingCVE-2026-13595Fix available6.8 Medium
- vim, red hat enterprise linux 10, enterprise linux 10.2 extended update support +9 more +11 moreVim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionCVE-2026-43961Fix available7.8 High