CVE Tools
Track your stack

Red Hat Enterprise Linux

11,036 CVEs tracked. 114 of them are in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux CVEs per month
MonthCVEs
2024-11128
2024-12183
2025-01107
2025-02288
2025-03149
2025-04126
2025-05254
2025-06259
2025-07282
2025-0869
2025-09377
2025-10346
2025-1175
2025-12199
2026-01107
2026-0245
2026-03118
2026-0488
2026-0558
2026-0698
2026-0793
2026-08100
2026-09137
2026-1024

Severity

How the 11,036 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical9088%
  • High4,31039%
  • Medium5,31248%
  • Low5065%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux.

  1. CVE-2026-104044Sssd: sssd: denial of service via crafted passkey kerberos authentication request6.2
  2. CVE-2026-104043Sssd: sssd: denial of service via undersized packet parsing in nss responder5.5
  3. CVE-2026-104042Sssd: sssd: denial of service via out-of-bounds read in pam responder5.5
  4. CVE-2026-104041Sssd: sssd: denial of service via unbounded negative cache growth5.5
  5. CVE-2026-104040Sssd: sssd: information disclosure via odata injection in entra id lookups4.4
  6. CVE-2026-104039Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder4.7
  7. CVE-2026-104038Sssd: sssd: denial of service via missing sid extension in certificate mapping5.9
  8. CVE-2026-104037Sssd: sssd: denial of service via packet length underflow in autofs responder5.5
  9. CVE-2026-92821Sssd: sssd: access control bypass via premature ldap access rule evaluation6.8
  10. CVE-2026-104036Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin5.8
  11. CVE-2026-104035Sssd: sssd: denial of service via memory exhaustion in kcm responder5.5
  12. CVE-2026-104034Sssd: sssd: denial of service via use-after-free in kcm ticket renewal4.7
  13. CVE-2026-104033Sssd: sssd: access control bypass via improper ldap shadow expiration check5.4
  14. CVE-2026-104032Sssd: sssd: denial of service via unprivileged autofs cache invalidation5.5
  15. CVE-2026-104031Sssd: sssd: denial of service via memory exhaustion in autofs responder5.5

Product grouping is registry-driven, with AI assist and human review. How it works