Skip to contentRed Hat Enterprise Linux vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePatch: filename validation bypass in reversal fallback allows file creation outside the working directoryCVE-2026-115207Fix available5.5 Medium
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: openscap: arbitrary file write via path traversal in source datastream decompositionCVE-2026-85518Fix available6.1 Medium
- red hat build of apache camel for spring boot 4, enterprise linux 8, enterprise linux 9 +5 more +7 moreUndertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversalCVE-2026-1143703.7 Low
- red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 morePodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-1142363.3 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactsCVE-2026-92824Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlCVE-2026-928236.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlCVE-2026-928226.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringCVE-2026-114038Fix available5.1 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreCockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line argumentsCVE-2026-113496Fix available5.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreCockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line argumentsCVE-2026-113495Fix available5.0 Medium
- red hat enterprise linux 8, enterprise linux 10, enterprise linux 6 +2 more +4 moreGhostscript: reintroduction of .charkeys -dsafer bypass in rhel 8CVE-2026-112177Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_selected_pathCVE-2026-112261Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channelsCVE-2026-112258Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)CVE-2026-112257Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsingCVE-2026-112260Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: null pointer dereference in swatchbooker (sbz) palette importCVE-2026-1122595.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parserCVE-2026-1122146.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreRhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.serviceCVE-2026-1122106.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationCVE-2026-164607.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCVE-2026-89096Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreNautilus: nautilus: arbitrary file deletion via trash symlinkCVE-2026-1118026.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibarchive: libarchive: use-after-free via aliased mac metadata copyCVE-2026-17591Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: paa integer overflow out-of-bounds readCVE-2026-62438Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerabilityCVE-2026-62439Fix available7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingCVE-2026-85977Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodingCVE-2026-852316.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via assertion failure in fsiddCVE-2026-89098Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus methodCVE-2026-111581Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: missing slot-range validation permits out-of-gap device i/oCVE-2026-1115556.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap oob read/write via unchecked migration data offsetsCVE-2026-105958Fix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreSpice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncationCVE-2026-105959Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassCVE-2026-104715Public exploitFix available7.8 High
- red hat enterprise linux 8, enterprise linux 9, fuse 7 +4 more +6 moreOrg.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor roleCVE-2026-848237.1 High
- gnome evolution-data-server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEvolution-data-server: local file disclosure via attach file:// urisCVE-2026-1107775.7 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-cryptoCVE-2026-86849Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: stack and heap buffer overflow in nfp vdpa driverCVE-2026-86856Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanupCVE-2026-86847Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-cryptoCVE-2026-86846Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupCVE-2026-86845Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)CVE-2026-86566Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoCVE-2026-86848Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapCVE-2026-86567Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: heap out-of-bounds read/write in gso header copyCVE-2026-100236Fix available8.6 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeCVE-2026-86565Fix available8.2 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: double offset bug in vhost log mapping calculationCVE-2026-86563Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)CVE-2026-86562Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: missing memory size validation before mmap in vhost memory region setupCVE-2026-86561Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctouCVE-2026-93683Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable fileCVE-2026-109968Fix available5.5 Medium
- Show moreLoading…