Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parserCVE-2026-1122146.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreRhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.serviceCVE-2026-1122106.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationCVE-2026-164607.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCVE-2026-89096Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreNautilus: nautilus: arbitrary file deletion via trash symlinkCVE-2026-1118026.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibarchive: libarchive: use-after-free via aliased mac metadata copyCVE-2026-17591Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: paa integer overflow out-of-bounds readCVE-2026-62438Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerabilityCVE-2026-62439Fix available7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingCVE-2026-85977Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodingCVE-2026-852316.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via assertion failure in fsiddCVE-2026-89098Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus methodCVE-2026-111581Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: missing slot-range validation permits out-of-gap device i/oCVE-2026-1115556.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassCVE-2026-104715Public exploitFix available7.8 High
- red hat enterprise linux 8, enterprise linux 9, fuse 7 +4 more +6 moreOrg.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor roleCVE-2026-848237.1 High
- gnome evolution-data-server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEvolution-data-server: local file disclosure via attach file:// urisCVE-2026-1107775.7 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-cryptoCVE-2026-86849Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: stack and heap buffer overflow in nfp vdpa driverCVE-2026-86856Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanupCVE-2026-86847Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-cryptoCVE-2026-86846Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupCVE-2026-86845Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)CVE-2026-86566Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoCVE-2026-86848Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapCVE-2026-86567Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: heap out-of-bounds read/write in gso header copyCVE-2026-100236Fix available8.6 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeCVE-2026-86565Fix available8.2 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: double offset bug in vhost log mapping calculationCVE-2026-86563Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)CVE-2026-86562Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: missing memory size validation before mmap in vhost memory region setupCVE-2026-86561Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctouCVE-2026-93683Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable fileCVE-2026-109968Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolCVE-2026-109971Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin written to world-readable fileCVE-2026-109970Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umaskCVE-2026-109969Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp charactersCVE-2026-1002316.1 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +3 more +5 moreGstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserializeCVE-2026-86476Public exploitFix available8.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indicesCVE-2026-1100363.3 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()CVE-2026-105460Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connectionCVE-2026-109976Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreGnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of serviceCVE-2026-1098335.9 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreGnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)CVE-2026-109832Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreM17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decodingCVE-2026-109854Fix available2.5 Low
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreMutter: mutter: client-triggered use-after-free in wayland color-management icc image description pathCVE-2026-108094Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loadingCVE-2026-108093Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entryCVE-2026-1080635.5 Medium
- red hat build of podman desktop, certification program for red hat enterprise linux 9, edge manager 1 +8 more +10 moreGvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposeCVE-2026-107935Fix available9.3 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreCups: null pointer dereference via embedded job ticket comments allows remote denial of serviceCVE-2026-107655Fix available4.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eog: arbitrary code execution via heap buffer overflow in png metadata readerCVE-2026-107651Fix available5.5 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +15 more +17 moreAnsible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionCVE-2026-89091Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruptionCVE-2026-107565Fix available5.1 Medium
- Show moreLoading…