Red hat enterprise linux

This hub aggregates every CVE we track for Red hat enterprise linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat enterprise linux.

• CVE-2026-42170Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)7.8Aug 8, 2026
• CVE-2026-61477Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection2.3Aug 7, 2026
• CVE-2026-15816Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()7.5Aug 7, 2026
• CVE-2026-18938P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems6.2Aug 7, 2026
• CVE-2026-19079Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation4.4Aug 7, 2026
• CVE-2026-7867Udisks2: udisks2: local privilege escalation via as-user option spoofing7.8Aug 6, 2026
• CVE-2026-18649Gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders7.5Aug 6, 2026
• CVE-2026-18839Popt-devel: popt-static: size_t underflow in singleoptionhelp2.2Aug 5, 2026
• CVE-2026-44605Rpm: heap buffer overflow in ndb slot table parsing5.5Aug 5, 2026
• CVE-2026-71227Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return5.1Aug 5, 2026
• CVE-2026-71226Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path7.3Aug 5, 2026
• CVE-2026-71225Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries6.5Aug 5, 2026
• CVE-2026-18103Dhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapi4.9Aug 4, 2026
• CVE-2026-68743Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5Aug 4, 2026
• CVE-2026-70368Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message6.5Aug 4, 2026