Red Hat Enterprise Linux
1,104 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Red Hat Enterprise Linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Enterprise Linux CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 11 |
| 2024-11 | 19 |
| 2024-12 | 1 |
| 2025-01 | 11 |
| 2025-02 | 25 |
| 2025-03 | 18 |
| 2025-04 | 29 |
| 2025-05 | 18 |
| 2025-06 | 29 |
| 2025-07 | 19 |
| 2025-08 | 8 |
| 2025-09 | 13 |
| 2025-10 | 10 |
| 2025-11 | 17 |
| 2025-12 | 8 |
| 2026-01 | 18 |
| 2026-02 | 20 |
| 2026-03 | 38 |
| 2026-04 | 45 |
| 2026-05 | 25 |
| 2026-06 | 86 |
| 2026-07 | 93 |
| 2026-08 | 100 |
| 2026-09 | 114 |
Severity
How the 1,104 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical23
- High402
- Medium596
- Low83
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux.
- CVE-2026-93834Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape8.8
- CVE-2026-95521Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm7.8
- CVE-2026-95519Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)7.8
- CVE-2026-97185Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file7.8
- CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entities7.8
- CVE-2026-96546Gimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loader2.5
- CVE-2026-96545Gimp: gimp: out-of-bounds heap read in the 4bpp tim image loader4.4
- CVE-2026-96541Gnome-remote-desktop: gnome-remote-desktop: unauthenticated rdp sockets lack a handshake deadline7.5
- CVE-2026-96276Flatpak: flatpak: arbitrary write in host context via flatpak build-init9.8
- CVE-2026-96275Flatpak: flatpak: arbitrary write access as root via extra-data extraction8.8
- CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization7.8
- CVE-2026-96442Emacs: emacs: arbitrary code execution in flymake mode7.8
- CVE-2026-13087Kernel: heap out-of-bounds write in the linux kernel rpc-over-rdma server reply path...8.8
- CVE-2026-90462Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization5.4
- CVE-2026-94640Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service7.5
Product grouping is registry-driven, with AI assist and human review. How it works