CVE Tools
Track your stack

Red Hat Enterprise Linux

11,177 CVEs tracked. 116 of them are in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux CVEs per month
MonthCVEs
2024-12183
2025-01107
2025-02288
2025-03149
2025-04126
2025-05254
2025-06259
2025-07282
2025-0869
2025-09377
2025-10346
2025-1175
2025-12199
2026-01107
2026-0245
2026-03119
2026-0489
2026-0558
2026-0698
2026-0793
2026-0899
2026-09138
2026-10150
2026-1110

Severity

How the 11,177 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical9138%
  • High4,35039%
  • Medium5,39648%
  • Low5185%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux.

  1. CVE-2026-123151Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail7.5
  2. CVE-2026-121997Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch8.1
  3. CVE-2026-121996Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length8.2
  4. CVE-2026-121995Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail7.5
  5. CVE-2026-121994Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length8.8
  6. CVE-2026-121259Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator6.5
  7. CVE-2026-119843Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags6.5
  8. CVE-2026-120831Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service6.5
  9. CVE-2026-120830Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure7.4
  10. CVE-2026-120740Hivex: hivex: denial of service via out-of-bounds read in big-data block processing2.0
  11. CVE-2026-120194Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step7.5
  12. CVE-2026-119842Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check6.5
  13. CVE-2026-119727Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation6.5
  14. CVE-2026-119729Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service6.5
  15. CVE-2026-119728Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure6.5

Product grouping is registry-driven, with AI assist and human review. How it works