CVE Tools
Track your stack

Red Hat Enterprise Linux

11,137 CVEs tracked. 115 of them are in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux CVEs per month
MonthCVEs
2024-11128
2024-12183
2025-01107
2025-02288
2025-03149
2025-04126
2025-05254
2025-06259
2025-07282
2025-0869
2025-09377
2025-10346
2025-1175
2025-12199
2026-01107
2026-0245
2026-03118
2026-0488
2026-0558
2026-0698
2026-0793
2026-08100
2026-09137
2026-10123

Severity

How the 11,137 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical9118%
  • High4,33939%
  • Medium5,37448%
  • Low5135%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux.

  1. CVE-2026-115486Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning7.1
  2. CVE-2026-115485Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio6.3
  3. CVE-2026-115484Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg7.6
  4. CVE-2026-115449Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest3.5
  5. CVE-2026-115221Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership5.4
  6. CVE-2026-111079Goose: goose: shell history and environment leak via terminal integration7.4
  7. CVE-2026-115207Patch: filename validation bypass in reversal fallback allows file creation outside the working directory5.5
  8. CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8
  9. CVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition6.1
  10. CVE-2026-114370Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal3.7
  11. CVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers3.3
  12. CVE-2026-92824Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts6.2
  13. CVE-2026-92823Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml6.2
  14. CVE-2026-92822Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml6.2
  15. CVE-2026-114038Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string5.1

Product grouping is registry-driven, with AI assist and human review. How it works