Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: group-admin escalation to realm-adminCVE-2026-9099Fix available7.7 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.4.14 +8 more +10 moreKeycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparisonCVE-2026-9800Fix available8.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulationCVE-2026-53277Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Add buffer overflow check in MS get_info_ioctlCVE-2026-53203Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Fix signed integer truncation in IPC receiveCVE-2026-53202Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreUSB: serial: io_ti: fix heap overflow in get_manuf_info()CVE-2026-53196Fix available6.8 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreUSB: serial: kl5kusb105: fix bulk-out buffer overflowCVE-2026-53194Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morezram: fix use-after-free in zram_bvec_write_partial()CVE-2026-53185Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreIB/isert: Reject login PDUs shorter than ISER_HEADERS_LENCVE-2026-53176Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreinet: frags: fix use-after-free caused by the fqdir_pre_exit() flushCVE-2026-53175Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moremm/list_lru: drain before clearing xarray entry on reparentCVE-2026-53153Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morethunderbolt: Clamp XDomain response data copy to allocation sizeCVE-2026-53148Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moredrm/gem: Try to fix change_handle ioctl, attempt 4CVE-2026-53145Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11CVE-2026-53143Fix available7.8 High
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request bodyCVE-2026-132086.5 Medium
- kubevirt, red hat container native virtualization 4.12, container native virtualization 4.13 +10 more +12 moreKubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruptionCVE-2026-13201Fix available7.3 High
- lepture mistune, red hat migration toolkit for applications 8, openshift ai (rhoai) +3 more +5 moreMistune: Potential DoS via quadratic-time parsing in parse_link_textCVE-2026-49851Fix available8.7 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: Fix linked reg delta tracking when src_reg == dst_regCVE-2026-53092Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet: pull headers in qdisc_pkt_len_segs_init()CVE-2026-53091Fix available8.4 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: Fix ld_{abs,ind} failure path analysis in subprogsCVE-2026-53090Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: fix mm lifecycle in open-coded task_vma iteratorCVE-2026-53085Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalarsCVE-2026-53081Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 moreBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rspCVE-2026-53071Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moredm log: fix out-of-bounds write due to region_count overflowCVE-2026-53059Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morebpf, sockmap: Take state lock for af_unix iterCVE-2026-53033Fix available7.8 High
- linux, linux kernel, red hat codeready linux builder eus (v.9.6) +40 more +42 morecrypto: ccp - copy IV using skcipher ivsizeCVE-2026-53016Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreice: fix double-free of tx_buf skbCVE-2026-53009Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: fix possible UAF in icmpv6_rcv()CVE-2026-53006Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morenetfilter: conntrack: remove sprintf usageCVE-2026-53002Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morenetfilter: nat: use kfree_rcu to release opsCVE-2026-53000Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moretipc: fix double-free in tipc_buf_append()CVE-2026-52993Public exploitFix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresched/psi: fix race between file release and pressure writeCVE-2026-52991Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callersCVE-2026-52989Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/amdgpu: avoid double drm_exec_fini() in userq validateCVE-2026-52987Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()CVE-2026-52976Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morefutex: Drop CLONE_THREAD requirement for private default hash allocCVE-2026-52973Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morecrypto: af_alg - Cap AEAD AD length to 0x80000000CVE-2026-52972Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreKVM: Reject wrapped offset in kvm_reset_dirty_gfn()CVE-2026-52969Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morelibceph: Fix potential out-of-bounds access in crush_decode()CVE-2026-52955Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreiommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to resetCVE-2026-52952Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/dma-buf: handle empty bo and UAF racesCVE-2026-52951Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/dma-buf: fix UAF with retry loopCVE-2026-52950Fix available7.8 High
- feast-dev feast, red hat openshift ai (rhoai), openshift ai 3.4 +2 moreFeast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC DeserializationCVE-2026-56121Public exploitFix available9.3 Critical
- jenkins script security, jenkins project script security plugin, red hat openshift developer tools and services +11 more +13 moreJenkins Script Security Plugin has a script security bypass vulnerabilityCVE-2026-57281Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morenet: skbuff: fix missing zerocopy reference in pskb_carve helpersCVE-2026-52943Public exploitFix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresctp: purge outqueue on stale COOKIE-ECHO handlingCVE-2026-52924Public exploitFix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipc: limit next_id allocation to the valid ID rangeCVE-2026-52923Public exploitFix available7.8 High
- fasterxml jackson-databind, red hat cryostat 4 on rhel 9, openshift developer tools and services +44 more +46 morejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)CVE-2026-54513Fix available8.1 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parserCVE-2026-12892Fix available4.4 Medium
- gstreamer, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parserCVE-2026-12891Fix available4.3 Medium
- Show moreLoading…