CVE Tools
Track your stack

Red Hat Enterprise Linux

1,291 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux CVEs per month
MonthCVEs
2024-121
2025-0111
2025-0225
2025-0318
2025-0429
2025-0518
2025-0629
2025-0719
2025-088
2025-0913
2025-1010
2025-1117
2025-128
2026-0118
2026-0220
2026-0338
2026-0445
2026-0525
2026-0686
2026-0793
2026-0899
2026-09138
2026-10149
2026-1113

Severity

How the 1,291 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical252%
  • High45435%
  • Medium70855%
  • Low1048%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux.

  1. CVE-2026-123876Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation4.4
  2. CVE-2026-120749Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus6.2
  3. CVE-2026-123037Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)6.7
  4. CVE-2026-123151Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail7.5
  5. CVE-2026-121997Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch8.1
  6. CVE-2026-121996Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length8.2
  7. CVE-2026-121995Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail7.5
  8. CVE-2026-121994Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length8.8
  9. CVE-2026-121259Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator6.5
  10. CVE-2026-119843Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags6.5
  11. CVE-2026-120831Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service6.5
  12. CVE-2026-120830Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure7.4
  13. CVE-2026-120740Hivex: hivex: denial of service via out-of-bounds read in big-data block processing2.0
  14. CVE-2026-120194Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step7.5
  15. CVE-2026-119842Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check6.5

Product grouping is registry-driven, with AI assist and human review. How it works