CVE Tools
Track your stack

Red Hat Enterprise Linux

11,132 CVEs tracked. 115 of them are in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux CVEs per month
MonthCVEs
2024-11128
2024-12183
2025-01107
2025-02288
2025-03149
2025-04126
2025-05254
2025-06259
2025-07282
2025-0869
2025-09377
2025-10346
2025-1175
2025-12199
2026-01107
2026-0245
2026-03118
2026-0488
2026-0558
2026-0698
2026-0793
2026-08100
2026-09137
2026-10118

Severity

How the 11,132 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical9118%
  • High4,33739%
  • Medium5,37248%
  • Low5125%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux.

  1. CVE-2026-111079Goose: goose: shell history and environment leak via terminal integration7.4
  2. CVE-2026-115207Patch: filename validation bypass in reversal fallback allows file creation outside the working directory5.5
  3. CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8
  4. CVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition6.1
  5. CVE-2026-114370Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal3.7
  6. CVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers3.3
  7. CVE-2026-92824Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts6.2
  8. CVE-2026-92822Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml6.2
  9. CVE-2026-92823Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml6.2
  10. CVE-2026-114038Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string5.1
  11. CVE-2026-113496Cockpit-machines: vnc console password disclosure through virt-xml command-line arguments5.0
  12. CVE-2026-113495Cockpit-machines: rhsm access-token disclosure through image helper command-line arguments5.0
  13. CVE-2026-112177Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 87.3
  14. CVE-2026-112261Gimp: gimp: use-after-free in xcf loader via prop_selected_path7.8
  15. CVE-2026-112258Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels7.8

Product grouping is registry-driven, with AI assist and human review. How it works