Enterprise Linux (Redhat) - vulnerabilities (CVEs)

3400 CVEs, 138 in the last 30 days, 266 known versions, newest CVE from 2026-10-28. Vendor: Redhat.

CVEs of Enterprise Linux

CVE-2026-109411 - CVSS 8.1 (high), 2026-10-28: An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or…
CVE-2026-116497 - CVSS 5.5 (medium), 2026-10-26: A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon…
CVE-2026-115486 - CVSS 7.1 (high), 2026-10-23: A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without…
CVE-2026-115485 - CVSS 6.3 (medium), 2026-10-23: A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is…
CVE-2026-115484 - CVSS 7.6 (high), 2026-10-23: A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read…
CVE-2026-115449 - CVSS 3.5 (low), 2026-10-22: A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under…
CVE-2026-115221 - CVSS 5.4 (medium), 2026-10-22: A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users…
CVE-2026-111079 - CVSS 7.4 (high), 2026-10-22: A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without…
CVE-2026-115207 - CVSS 5.5 (medium), 2026-10-22: A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow…
CVE-2026-114406 - CVSS 6.8 (medium), 2026-10-21: The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of…
CVE-2026-85518 - CVSS 6.1 (medium), 2026-10-21: A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes,…
CVE-2026-114370 - CVSS 3.7 (low), 2026-10-21: A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system.…
CVE-2026-114236 - CVSS 3.3 (low), 2026-10-21: storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls…
CVE-2026-92824 - CVSS 6.2 (medium), 2026-10-21: A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound…
CVE-2026-92823 - CVSS 6.2 (medium), 2026-10-21: A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not…
CVE-2026-92822 - CVSS 6.2 (medium), 2026-10-21: A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and…
CVE-2026-114038 - CVSS 5.1 (medium), 2026-10-21: A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing…
CVE-2026-113496 - CVSS 5 (medium), 2026-10-20: A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is passed directly as a…
CVE-2026-113495 - CVSS 5 (medium), 2026-10-20: A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line arguments to background helper…
CVE-2026-112177 - CVSS 7.3 (high), 2026-10-20: A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25…
CVE-2026-112261 - CVSS 7.8 (high), 2026-10-19: A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading…
CVE-2026-112258 - CVSS 7.8 (high), 2026-10-19: A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection…
CVE-2026-112257 - CVSS 7.8 (high), 2026-10-19: A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG…
CVE-2026-112260 - CVSS 7.1 (high), 2026-10-19: A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into…
CVE-2026-112259 - CVSS 5.5 (medium), 2026-10-19: A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison,…
CVE-2026-112214 - CVSS 6.5 (medium), 2026-10-19: A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a…
CVE-2026-112210 - CVSS 6 (medium), 2026-10-19: A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by…
CVE-2026-16460 - CVSS 7.4 (high), 2026-10-19: A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current…
CVE-2026-89096 - CVSS 5.9 (medium), 2026-10-16: A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an…
CVE-2026-89088 - CVSS 5.5 (medium), 2026-10-16: A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or…
CVE-2026-89085 - CVSS 6.6 (medium), 2026-10-16: A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error…
CVE-2026-111802 - CVSS 6.6 (medium), 2026-10-16: A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying…
CVE-2026-17591 - CVSS 3.6 (low), 2026-10-16: A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability,…
CVE-2026-62438 - CVSS 6.1 (medium), 2026-10-16: A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or…
CVE-2026-62439 - CVSS 7 (high), 2026-10-16: A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user…
CVE-2026-85977 - CVSS 5.3 (medium), 2026-10-16: A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that…
CVE-2026-85231 - CVSS 6.5 (medium), 2026-10-16: A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote…
CVE-2026-89098 - CVSS 5.5 (medium), 2026-10-16: A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify…
CVE-2026-111581 - CVSS 3.3 (low), 2026-10-16: A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional…
CVE-2026-111555 - CVSS 6 (medium), 2026-10-16: A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect…
CVE-2026-105958 - CVSS 7.5 (high), 2026-10-16: A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds…
CVE-2026-105959 - CVSS 7.5 (high), 2026-10-16: A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing…
CVE-2026-104715 - CVSS 7.8 (high), 2026-10-16: A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common…
CVE-2026-84823 - CVSS 7.1 (high), 2026-10-15: A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal…
CVE-2026-110777 - CVSS 5.7 (medium), 2026-10-14: A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file,…
CVE-2026-86849 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host…
CVE-2026-86856 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured,…
CVE-2026-86847 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails,…
CVE-2026-86846 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an…
CVE-2026-86845 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type…
CVE-2026-86566 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared…
CVE-2026-86848 - CVSS 8.8 (high), 2026-10-14: A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to…
CVE-2026-86567 - CVSS 8.8 (high), 2026-10-14: A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap.
CVE-2026-100236 - CVSS 8.6 (high), 2026-10-14: A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first…
CVE-2026-86565 - CVSS 8.2 (high), 2026-10-14: A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host…
CVE-2026-86563 - CVSS 7.8 (high), 2026-10-14: A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access.
CVE-2026-86562 - CVSS 7.8 (high), 2026-10-14: A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the…
CVE-2026-86561 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or…
CVE-2026-93683 - CVSS 6.4 (medium), 2026-10-14: A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory…
CVE-2026-109968 - CVSS 5.5 (medium), 2026-10-14: A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file.…
CVE-2026-100229 - CVSS 6.5 (medium), 2026-10-14: A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function,…
CVE-2026-109971 - CVSS 4.7 (medium), 2026-10-14: A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool, making it…
CVE-2026-109970 - CVSS 4.7 (medium), 2026-10-14: A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plaintext to a file without setting…
CVE-2026-109969 - CVSS 4.7 (medium), 2026-10-14: A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without explicit permission restrictions or…
CVE-2026-100231 - CVSS 6.1 (medium), 2026-10-14: A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside…
CVE-2026-86476 - CVSS 8.4 (high), 2026-10-14: A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares…
CVE-2026-110036 - CVSS 3.3 (low), 2026-10-13: A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted…
CVE-2026-105460 - CVSS 5.5 (medium), 2026-10-13: A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events.…
CVE-2026-109976 - CVSS 4.7 (medium), 2026-10-13: A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket without a…
CVE-2026-109833 - CVSS 5.9 (medium), 2026-10-13: A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer…
CVE-2026-109832 - CVSS 7.5 (high), 2026-10-13: A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and…
CVE-2026-109854 - CVSS 2.5 (low), 2026-10-13: A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read…
CVE-2026-108094 - CVSS 7.8 (high), 2026-10-12: A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client…
CVE-2026-108119 - CVSS 6.3 (medium), 2026-10-09: A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate…
CVE-2026-108093 - CVSS 5.5 (medium), 2026-10-09: A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present…
CVE-2026-108063 - CVSS 5.5 (medium), 2026-10-09: A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By…
CVE-2026-107935 - CVSS 9.3 (critical), 2026-10-09: A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated…
CVE-2026-107655 - CVSS 4 (medium), 2026-10-09: A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an…
CVE-2026-107651 - CVSS 5.5 (medium), 2026-10-08: A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split…
CVE-2026-89091 - CVSS 8.8 (high), 2026-10-08: A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using…
CVE-2026-107565 - CVSS 5.1 (medium), 2026-10-08: A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup…
CVE-2026-107466 - CVSS 6.1 (medium), 2026-10-08: A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration (CI)…
CVE-2026-107161 - CVSS 7.5 (high), 2026-10-07: A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for…
CVE-2026-106067 - CVSS 6.3 (medium), 2026-10-07: A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width *…
CVE-2026-106066 - CVSS 6.3 (medium), 2026-10-07: A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width *…
CVE-2026-106065 - CVSS 6.3 (medium), 2026-10-07: A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing…
CVE-2026-107169 - CVSS 6.2 (medium), 2026-10-07: A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during…
CVE-2026-107167 - CVSS 6.2 (medium), 2026-10-07: A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions.…
CVE-2026-106064 - CVSS 6.3 (medium), 2026-10-07: A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when…
CVE-2026-107170 - CVSS 2.9 (low), 2026-10-07: A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error…
CVE-2026-107168 - CVSS 6.2 (medium), 2026-10-07: A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to…
CVE-2026-106061 - CVSS 5.5 (medium), 2026-10-07: A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width…
CVE-2026-80048 - CVSS 5.5 (medium), 2026-10-06: A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large…
CVE-2026-104045 - CVSS 4.7 (medium), 2026-10-06: A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous…
CVE-2026-104046 - CVSS 6.2 (medium), 2026-10-06: A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state…
CVE-2026-106062 - CVSS 7.8 (high), 2026-10-06: A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height,…
CVE-2026-101258 - CVSS 7.8 (high), 2026-10-06: A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell…
CVE-2026-106063 - CVSS 6.3 (medium), 2026-10-06: A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path…
CVE-2026-104048 - CVSS 8.1 (high), 2026-10-06: A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain…
CVE-2026-104047 - CVSS 5.3 (medium), 2026-10-06: A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query…