CVE-2026-80725
Severity: important
Released on: 29/08/2026
Advisory:
Bugzilla: 2525861
Bugzilla Description: kernel: net: gro: properly validate BIG TCP aggregation criteria
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-56854
Severity: critical
Released on: 28/08/2026
Advisory:
Bugzilla: 2525639
Bugzilla Description: golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-346
Affected Packages:
Package States: Assisted Installer for Red Hat OpenShift Container Platform 2,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Cryostat 4,External Secrets Operator for Red Hat OpenShift,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ceph Storage 9,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift for Windows Containers,Red Hat OpenShift for Windows Containers,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Security Profiles Operator,Security Profiles Operator,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,Zero Trust Workload Identity Manager - Tech Preview,
Full Details
CVE document

CVE-2026-82327
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525602
Bugzilla Description: libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-129
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,
Full Details
CVE document

CVE-2026-80612
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525366
Bugzilla Description: kernel: net: lwtunnel: Drop skb metadata before LWT encapsulation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80673
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525367
Bugzilla Description: kernel: ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80661
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525368
Bugzilla Description: kernel: ufs: core: tracing: Do not dereference pointers in TP_printk()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80603
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525369
Bugzilla Description: kernel: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80677
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525370
Bugzilla Description: kernel: driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80718
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525371
Bugzilla Description: kernel: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80697
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525372
Bugzilla Description: kernel: erofs: ensure valid f_path for page cache sharing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80700
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525373
Bugzilla Description: kernel: drm/vmwgfx: validate external BO copy bounds for both stride paths
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80664
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525374
Bugzilla Description: kernel: netfilter: xt_nat: reject unsupported target families
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80689
Severity: low
Released on: 28/08/2026
Advisory:
Bugzilla: 2525375
Bugzilla Description: kernel: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80694
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525376
Bugzilla Description: kernel: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-843
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80618
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525378
Bugzilla Description: kernel: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-832
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80599
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525379
Bugzilla Description: kernel: batman-adv: dat: ensure accessible eth_hdr proto field
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80629
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525380
Bugzilla Description: kernel: octeontx2-af: npc: Fix size of entry2cntr_map
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80667
Severity: low
Released on: 28/08/2026
Advisory:
Bugzilla: 2525381
Bugzilla Description: kernel: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80600
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525382
Bugzilla Description: kernel: batman-adv: dat: acquire ARP hw source only after skb realloc
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80598
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525383
Bugzilla Description: kernel: ntfs3: fix out-of-bounds read in decompress_lznt
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80610
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525384
Bugzilla Description: kernel: net: enetc: fix potential divide-by-zero when num_vsi is zero
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80655
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525385
Bugzilla Description: kernel: soc: xilinx: Fix race condition in event registration
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80682
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525386
Bugzilla Description: kernel: riscv/mm: use physical alignment for vmemmap_start_pfn
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-131
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80648
Severity: low
Released on: 28/08/2026
Advisory:
Bugzilla: 2525387
Bugzilla Description: kernel: pinctrl: spacemit: fix NULL check in spacemit_pin_set_config
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80595
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525388
Bugzilla Description: kernel: Input: ims-pcu - add response length checks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80594
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525389
Bugzilla Description: kernel: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-606
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80654
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525390
Bugzilla Description: kernel: soc: xilinx: Shutdown and free rx mailbox channel
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80670
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525391
Bugzilla Description: kernel: perf tools: Use perf_env__get_cpu_topology() in machine__resolve()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1285
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80653
Severity: low
Released on: 28/08/2026
Advisory:
Bugzilla: 2525392
Bugzilla Description: kernel: scsi: hisi_sas: Add slave_destroy interface for v3 hw
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80712
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525393
Bugzilla Description: kernel: spi: spi-qpic-snand: write the feature value before executing SET_FEATURE
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80619
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525394
Bugzilla Description: kernel: apparmor: fix potential UAF in aa_replace_profiles
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80684
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525395
Bugzilla Description: kernel: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80597
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525396
Bugzilla Description: kernel: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80591
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525397
Bugzilla Description: kernel: f2fs: fix listxattr handling of corrupted xattr entries
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80676
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525398
Bugzilla Description: kernel: Drivers: hv: vmbus: use generic driver_override infrastructure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80707
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525399
Bugzilla Description: kernel: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80671
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525400
Bugzilla Description: kernel: perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80672
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525401
Bugzilla Description: kernel: ntfs: fix u16 truncation of restart-area length check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80652
Severity: low
Released on: 28/08/2026
Advisory:
Bugzilla: 2525402
Bugzilla Description: kernel: crypto: ccp - Treat zero-length cert chain as query for blob lengths
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80674
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525403
Bugzilla Description: kernel: ntfs: validate resident attribute lists and harden the validator
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80620
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525404
Bugzilla Description: kernel: Revert "PCI/MSI: Unmap MSI-X region on error"
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80662
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525422
Bugzilla Description: kernel: cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80711
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525445
Bugzilla Description: kernel: power: supply: max17040: handle missing status supplier
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80639
Severity: low
Released on: 28/08/2026
Advisory:
Bugzilla: 2525497
Bugzilla Description: kernel: cxl/test: Fix __fortify_panic
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80604
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525498
Bugzilla Description: kernel: HID: core: Fix OOB read in hid_get_report for numbered reports
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80592
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525499
Bugzilla Description: kernel: samples/damon/mtier: fail early if address range parameters are invalid
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1288
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80636
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525500
Bugzilla Description: kernel: netfilter: conntrack: revert ct extension genid infrastructure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80693
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525501
Bugzilla Description: kernel: idpf: bound interrupt-vector register fill to the allocated array
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80628
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525502
Bugzilla Description: kernel: ALSA: seq: oss: Serialize readq reset state with q->lock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-820
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80621
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525503
Bugzilla Description: kernel: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80633
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525504
Bugzilla Description: kernel: iommufd: Take dma_resv lock before dma_buf_unpin() in release path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-414
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80678
Severity: moderate
Released on: 28/08/2026
Advisory:
Bugzilla: 2525505
Bugzilla Description: kernel: i2c: imx: Fix slave registration race and error handling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80489
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2524870
Bugzilla Description: glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-81893
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2524834
Bugzilla Description: gdk-pixbuf: gdk-pixbuf: invalid write in JPEG ICC profile parser on error recovery
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-81624
Severity: important
Released on: 27/08/2026
Advisory:
Bugzilla: 2524868
Bugzilla Description: undertow-core: undertow: WebSocketContainer defaults for buffers and timeouts are infinite
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-81658
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2524899
Bugzilla Description: foreman: Cross-tenant disclosure of template revisions via unauthorized audit lookup
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-81668
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2524928
Bugzilla Description: rubygem-katello: Cross-tenant Content View Filter rule access and modification via unauthorized parent filter lookup
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-38350
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2525313
Bugzilla Description: ffmpeg: FFmpeg: Integer overflow leads to Denial of Service
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-38347
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2525314
Bugzilla Description: ffmpeg: FFmpeg: Heap overflow vulnerability leads to Denial of Service
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-38348
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2525315
Bugzilla Description: ffmpeg: FFmpeg: Denial of Service via crafted image file due to integer overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-38343
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2525320
Bugzilla Description: ffmpeg: FFmpeg: Denial of Service via integer overflow in video scaling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-38345
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2525325
Bugzilla Description: ffmpeg: FFmpeg: Denial of Service via division-by-zero vulnerability in `ff_sws_init_single_context` function.
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-38346
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2525326
Bugzilla Description: ffmpeg: FFmpeg: Denial of Service via crafted video file due to integer overflow
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-38349
Severity: important
Released on: 27/08/2026
Advisory:
Bugzilla: 2525327
Bugzilla Description: ffmpeg: FFmpeg: Denial of Service via crafted image file due to integer overflow
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-38344
Severity: moderate
Released on: 27/08/2026
Advisory:
Bugzilla: 2525330
Bugzilla Description: ffmpeg: FFmpeg: Denial of Service via crafted video file
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-65642
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524738
Bugzilla Description: Plesk: Plesk: Information disclosure and data modification via Insecure Direct Object Reference
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-65646
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524740
Bugzilla Description: Plesk: Plesk: Remote Privilege Escalation and File Disclosure Vulnerability
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-47842
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524636
Bugzilla Description: org.springframework.security/spring-security-core: Spring Security: Information disclosure via deterministic AES/CBC encryption
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1204
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,Red Hat Fuse 7,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-80206
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524336
Bugzilla Description: nltk: NLTK: Denial of Service vulnerability in tgrep module
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-80205
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524331
Bugzilla Description: nltk: NLTK: Denial of Service via unvalidated regular expressions
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-79654
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2523348
Bugzilla Description: ketello: Katello Content View History API Cross-Organization Authorization Bypass
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-78002
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2521135
Bugzilla Description: rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-131
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80179
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524147
Bugzilla Description: jwcrypto: jwcrypto: Denial of Service via malformed JWE tokens
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-80524
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524417
Bugzilla Description: kernel: optee: ffa: Add NULL check in optee_ffa_lend_protmem
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80554
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524419
Bugzilla Description: kernel: s390/vfio_ccw: Limit the number of channel program segments
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80547
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524420
Bugzilla Description: kernel: s390/vfio_ccw: Implement a crw lock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74749
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524421
Bugzilla Description: kernel: rseq: Prevent hard lockup on granted time slice extension
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-366
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74752
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524422
Bugzilla Description: kernel: sctp: validate cookie AUTH state before use
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80522
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524423
Bugzilla Description: kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74734
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524424
Bugzilla Description: kernel: firewire: ohci: fix NULL pointer dereference in ar_context_release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74751
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524425
Bugzilla Description: kernel: riscv: lib: Fix ZBB strnlen reading past count boundary
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74739
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524426
Bugzilla Description: kernel: net/sched: cls_u32: skip hash tables in u32_bind_class()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80575
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524427
Bugzilla Description: kernel: Input: cs40l50-vibra - validate custom data from user space
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80576
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524428
Bugzilla Description: kernel: drm/amdgpu: reject oversized IBs with per-ring packet limits
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74754
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524429
Bugzilla Description: kernel: scsi: core: pair EH runtime PM get and put
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74748
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524430
Bugzilla Description: kernel: netfilter: ipset: fix refcount race between list:set GC and swap
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74744
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524431
Bugzilla Description: kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-124
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80537
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524432
Bugzilla Description: kernel: xfs: fix off-by-one in rtrefcount btree root level validation
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80546
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524433
Bugzilla Description: kernel: s390/zcrypt: Improve CCA CPRB length and overflow checks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74753
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524434
Bugzilla Description: kernel: perf: Reject exited events as group leaders
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80585
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524435
Bugzilla Description: kernel: mptcp: fastopen: only mark MPTFO subflows with SYN data
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74743
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524436
Bugzilla Description: kernel: macvlan: inherit needed_headroom and needed_tailroom from lowerdev
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-124
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80557
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524437
Bugzilla Description: kernel: libceph: fix OOB read in decode_watchers() via missing bounds check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80586
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524438
Bugzilla Description: kernel: mptcp: options: reset DSS fields in case of unexpected size
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80562
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524439
Bugzilla Description: kernel: gpio: ml-ioh: use raw_spinlock_t for the register lock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-821
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80545
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524440
Bugzilla Description: kernel: s390/zcrypt: Improve EP11 CPRB length and overflow checks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80541
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524441
Bugzilla Description: kernel: drm/amdgpu: validate GEM_CREATE domain combinations
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80553
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524442
Bugzilla Description: kernel: s390/vfio_ccw: Cancel existing workqueues
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-364
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80581
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524443
Bugzilla Description: kernel: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-390
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80529
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524444
Bugzilla Description: kernel: xfs: don't swallow dquot recovery verification errors
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-252
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80523
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524445
Bugzilla Description: kernel: clk: spacemit: k3: set hdma clock as critical
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-909
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74738
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524446
Bugzilla Description: kernel: regmap: sdw-mbq: don't call an unset readable_reg callback
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80527
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524447
Bugzilla Description: kernel: ceph: fix hanging __ceph_get_caps() with stale mds_wanted
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80567
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524449
Bugzilla Description: kernel: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74750
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524450
Bugzilla Description: kernel: ovpn: defer key slot crypto freeing to workqueue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-663
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80531
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524451
Bugzilla Description: kernel: xfs: avoid UAF on sc->tempip in xrep_tempfile_create
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80539
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524452
Bugzilla Description: kernel: drm/amdgpu: disallow multiple FENCE chunks in one submit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80538
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524453
Bugzilla Description: kernel: xfs: propagate errors from xfs_rtginode_load
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-253
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80543
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524454
Bugzilla Description: kernel: s390/zcrypt: Pad trailing CCA or EP11 message with zeros
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74736
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524455
Bugzilla Description: kernel: net/sched: cls_bpf: reject dev-bound programs bound to a different device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-346
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80558
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524456
Bugzilla Description: kernel: libceph: Avoid using invalid osd indices from primary_temp
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80559
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524457
Bugzilla Description: kernel: Input: sur40 - fix input device registration ordering
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80571
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524458
Bugzilla Description: kernel: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80577
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524459
Bugzilla Description: kernel: drm/panthor: skip zero-sized firmware sections
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74742
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524460
Bugzilla Description: kernel: veth: fix queue index used to wake the peer txq in veth_poll
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1285
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80566
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524461
Bugzilla Description: kernel: Input: hynitron_cstxxx - validate touch count and finger IDs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80580
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524462
Bugzilla Description: kernel: fbdev: bound mode sysfs output to the sysfs buffer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80550
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524463
Bugzilla Description: kernel: s390/vfio_ccw: Fix out of bounds check on CCW array
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80525
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524464
Bugzilla Description: kernel: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80569
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524465
Bugzilla Description: kernel: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80535
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524467
Bugzilla Description: kernel: xfs: don't double-lock when deleting a self-referential directory
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-764
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80572
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524468
Bugzilla Description: kernel: Input: byd - synchronize timer deletion before freeing private data
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-364
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80582
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524469
Bugzilla Description: kernel: drm/shmem_helper: Check VMA boundaries for PMD mappings
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74740
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524470
Bugzilla Description: kernel: net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80565
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524471
Bugzilla Description: kernel: crypto: qce - fix error path in devm_qce_register_algs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-763
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80520
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524472
Bugzilla Description: kernel: ovpn: fix NULL dereference when killing missing key
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74737
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524473
Bugzilla Description: kernel: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80584
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524475
Bugzilla Description: kernel: s390/qeth: validate user buffer length in SNMP and ARP query ioctls
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74741
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524476
Bugzilla Description: kernel: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80578
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524477
Bugzilla Description: kernel: fbdev: core: Fix pointer desynchronization in fb_io_read()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80521
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524478
Bugzilla Description: kernel: af_unix: Unlink scc_entry in unix_del_edge()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80573
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524479
Bugzilla Description: kernel: Input: iforce - validate input packet lengths
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80583
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524480
Bugzilla Description: kernel: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74747
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524481
Bugzilla Description: kernel: ipvs: revalidate ihl to prevent out-of-bounds access
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80563
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524482
Bugzilla Description: kernel: gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74746
Severity: important
Released on: 26/08/2026
Advisory:
Bugzilla: 2524483
Bugzilla Description: kernel: netfilter: flowtable: publish GC-visible tuple last
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74735
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524484
Bugzilla Description: kernel: l2tp: fix tunnel and session refcount leak on seq_file release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80533
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524486
Bugzilla Description: kernel: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80540
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524487
Bugzilla Description: kernel: drm/amdgpu: Fix UVD decode image min size calculation
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-190
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-80564
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524488
Bugzilla Description: kernel: gve: fix NULL dereference due to missing ptp adjfine
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-80532
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524489
Bugzilla Description: kernel: xfs: fix another iunlink infinite loop bug in online fsck
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80568
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524490
Bugzilla Description: kernel: Input: synaptics-rmi4 - block s_input when F54 queue is busy
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-131
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-80519
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524491
Bugzilla Description: kernel: ovpn: finish crypto callback cleanup before peer release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80530
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524492
Bugzilla Description: kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80542
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524493
Bugzilla Description: kernel: drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80587
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524494
Bugzilla Description: kernel: mptcp: avoid combining some incoming suboptions
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1288
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80544
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524495
Bugzilla Description: kernel: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80589
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524496
Bugzilla Description: kernel: block: stop the timeout timer when releasing a never added disk
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80526
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524498
Bugzilla Description: kernel: ASoC: tas2562: Validate values for volume writes
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80570
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524499
Bugzilla Description: kernel: Input: synaptics-rmi4 - zero report size on F54 work error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80556
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524500
Bugzilla Description: kernel: mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80536
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524501
Bugzilla Description: kernel: xfs: bounds-check buffer log item's dirty bitmap
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80528
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524502
Bugzilla Description: kernel: ceph: avoid fs reclaim while using current->journal_info
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-843
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80574
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524503
Bugzilla Description: kernel: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80548
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524504
Bugzilla Description: kernel: s390/vfio_ccw: Selectively expand io_mutex
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-366
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80551
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524505
Bugzilla Description: kernel: s390/vfio_ccw: Ensure first IDAW remains constant
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80579
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524506
Bugzilla Description: kernel: fbdev: clear fb_info->mode before deleting a videomode
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80549
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524507
Bugzilla Description: kernel: s390/vfio_ccw: Move cp cleanup out of not operational
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74745
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524508
Bugzilla Description: kernel: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80552
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524509
Bugzilla Description: kernel: s390/vfio_ccw: Ensure index for read/write regions are within range
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80588
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524510
Bugzilla Description: kernel: mptcp: reclaim forward-allocated memory on RX path errors
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80561
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524511
Bugzilla Description: kernel: libceph: fix multiple unsafe decodes in decode_locker()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80560
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524512
Bugzilla Description: kernel: openrisc: signal: do not restore privileged SR bits on sigreturn
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-15
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80534
Severity: low
Released on: 26/08/2026
Advisory:
Bugzilla: 2524514
Bugzilla Description: kernel: xfs: fix ilock leak on error in xfs_dq_get_next_id
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-667
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80158
Severity: moderate
Released on: 26/08/2026
Advisory:
Bugzilla: 2524651
Bugzilla Description: ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the IPA bind password in logs and process listings
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-214
Affected Packages:
Package States: Red Hat Ceph Storage 5,Red Hat Ceph Storage 9,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-57171
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2524216
Bugzilla Description: compliance-trestle: Trestle: Arbitrary file write via path traversal in author generate commands
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-22
Affected Packages:
Package States: File Integrity Operator,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-57170
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2524207
Bugzilla Description: compliance-trestle: Trestle: Arbitrary code execution via Server-Side Template Injection
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-917
Affected Packages:
Package States: File Integrity Operator,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-52776
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2524202
Bugzilla Description: compliance-trestle: Trestle: Server-Side Request Forgery (SSRF) bypass via IPv4-mapped IPv6 and 0.0.0.0
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-1289
Affected Packages:
Package States: File Integrity Operator,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-54757
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2524199
Bugzilla Description: compliance-trestle: Trestle: Remote Code Execution via Server-Side Template Injection
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-917
Affected Packages:
Package States: File Integrity Operator,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-16645
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2524176
Bugzilla Description: photoswipe: PhotoSwipe: Unauthorized access due to missing authorization
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-425
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-72924
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2524130
Bugzilla Description: github.com/cli/cli: GitHub CLI: Forwarded services exposed on all network interfaces by default
CVSS Score:
CVSSv3 Score: 4.6
Vector:
CWE: CWE-1327
Affected Packages:
Package States: Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-68515
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523747
Bugzilla Description: OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-19913
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523656
Bugzilla Description: mwEmbed: html5lib: Kaltura HTML5 Player: Information disclosure via improper validation of ServiceUrl parameter
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-55553
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523609
Bugzilla Description: urllib: urllib: Credential leakage via cross-origin redirects
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-63075
Severity: low
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517570
Bugzilla Description: openssl: QUIC ACK-only packet retention can cause memory exhaustion
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-79781
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523572
Bugzilla Description: github.com/rclone/rclone: rclone: Path Traversal allows unauthorized file access
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-22
Affected Packages:
Package States: Cryostat 4,Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-79779
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523550
Bugzilla Description: github.com/rclone/rclone: rclone: Credential exposure via HTTPS-to-HTTP redirect downgrade.
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-523
Affected Packages:
Package States: Cryostat 4,Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-79780
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523578
Bugzilla Description: github.com/rclone/rclone: rclone: Information disclosure via S3 redirect callbacks
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-201
Affected Packages:
Package States: Cryostat 4,Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-79776
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523573
Bugzilla Description: github.com/rclone/rclone: rclone: Authentication bypass leads to backend credential disclosure
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-305
Affected Packages:
Package States: Cryostat 4,Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2026-79772
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523567
Bugzilla Description: nokogiri: Nokogiri: Signature validation bypass via unchecked return value
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-252
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-79770
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523562
Bugzilla Description: nokogiri: Nokogiri: Denial of Service via crafted CSS selectors
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-79771
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523571
Bugzilla Description: nokogiri: Nokogiri: Denial of Service via XSLT transform memory leak
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-79769
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523563
Bugzilla Description: nokogiri: Nokogiri: Process crash due to invalid memory read via programming error in internal method
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-843
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-79676
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523560
Bugzilla Description: nltk: NLTK: Information disclosure via path traversal with symlink bypass
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-79674
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523576
Bugzilla Description: nltk: NLTK: Information disclosure via path traversal in corpus-reader constructors
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2025-71406
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523577
Bugzilla Description: nokogiri: libxslt: Nokogiri: Memory corruption via crafted XSLT
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2025-71346
Severity: low
Released on: 25/08/2026
Advisory:
Bugzilla: 2523552
Bugzilla Description: nokogiri: libxml2: Nokogiri: Heap buffer under-read in XML Schema validation
CVSS Score:
CVSSv3 Score: 2.9
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2023-54354
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523569
Bugzilla Description: nokogiri: libxml2: Nokogiri: Denial of Service via crafted XML schema
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2022-50999
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523554
Bugzilla Description: nokogiri: libxml2: Nokogiri: Integer overflow in libxml2 leads to information disclosure, data modification, or denial of service
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2021-47996
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523549
Bugzilla Description: nokogiri: libxml2: Nokogiri: Memory Corruption via Crafted XML Documents
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2022-50998
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2523558
Bugzilla Description: nokogiri: libxml2: Nokogiri: Denial of Service and Memory Corruption via Crafted XML Input
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-80182
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2517801
Bugzilla Description: keystone: keystone: Delegated token scope restrictions not consistently enforced across trust, OAuth1, and application credential endpoints
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-80184
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2517802
Bugzilla Description: keystone: keystone: Application credential tokens can escape project scope via token-method reauthentication
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-16599
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523509
Bugzilla Description: wget: wget: Denial of Service via crafted FTP OPIE/S-KEY authentication challenge
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-78360
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2521819
Bugzilla Description: anitya: anitya: missing authorization check in delete_user allows any authenticated user to delete arbitrary users
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-79717
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523431
Bugzilla Description: galaxy_ng: galaxy_ng: blind SSRF via namespace avatar_url with no private-address restriction
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-78684
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523362
Bugzilla Description: vllm: vLLM: Denial of Service via DeepStream backend resource control bypass.
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-77117
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523274
Bugzilla Description: glibc: Non-progress DoS in SHIFT_JISX0213 ->
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-19499
Severity: moderate
Released on: 25/08/2026
Advisory: RHSA-2026:60865,
Bugzilla: 2523258
Bugzilla Description: glibc: Buffer Overflow in strfmon right-justification padding
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-787
Affected Packages: glibc-main-2.43-8.3.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-19542
Severity: moderate
Released on: 25/08/2026
Advisory: RHSA-2026:59721,
Bugzilla: 2523249
Bugzilla Description: glibc: Fix out-of-bounds array write in tdelete
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-787
Affected Packages: glibc-main-2.43-8.2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-59183
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523187
Bugzilla Description: openexr: OpenEXR: Integer Overflow Vulnerability Leading to Application Crash
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-55373
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523181
Bugzilla Description: openexr: OpenEXR: Denial of Service via infinite loop in sample count processing.
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-55371
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523180
Bugzilla Description: openexr: OpenEXR: Denial of Service via NULL pointer dereference in exr_attr_set_bytes()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-55059
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523179
Bugzilla Description: OpenEXR: OpenEXR: Heap out-of-bounds write leads to denial of service
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-124
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-54920
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2523178
Bugzilla Description: openexr: OpenEXR: Denial of Service via crafted HTJ2K-compressed EXR file
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-18798
Severity: moderate
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517559
Bugzilla Description: openssl: QUIC server may trigger double free when processing INITIAL packet
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-415
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-63072
Severity: moderate
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517560
Bugzilla Description: openssl: heap buffer overflow in CMS key unwrapping
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-63076
Severity: moderate
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517561
Bugzilla Description: openssl: invalid pointer dereference in CMP server via crafted protectionAlg
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-14457
Severity: low
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517562
Bugzilla Description: openssl: RPK server signature algorithm selection can dereference a missing certificate
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-54874
Severity: low
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517564
Bugzilla Description: openssl: excessive memory use buffering DTLS records for a future epoch
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-405
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-63073
Severity: low
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517565
Bugzilla Description: openssl: untrusted sender DN used as format string in CMP response validation
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-134
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-63074
Severity: low
Released on: 25/08/2026
Advisory: RHSA-2026:59641, RHSA-2026:59635,
Bugzilla: 2517566
Bugzilla Description: openssl: CMP indefinite cache growth of ExtraCerts
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages: openssl3-main-3.5.8-0.1.hum1,openssl-main-3.5.8-0.1.hum1,
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat JBoss Core Services,Red Hat JBoss Web Server 6,Red Hat JBoss Web Server 7,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite Client,Red Hat Satellite Client,
Full Details
CVE document

CVE-2026-52491
Severity: important
Released on: 25/08/2026
Advisory: RHSA-2026:53467,
Bugzilla: 2524131
Bugzilla Description: libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-120
Affected Packages: libtiff-main-4.7.2-2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80186
Severity: important
Released on: 25/08/2026
Advisory:
Bugzilla: 2524132
Bugzilla Description: bluez: Stack Overflow in name2utf8 causes DoS and potential code execution
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-80185
Severity: moderate
Released on: 25/08/2026
Advisory:
Bugzilla: 2524139
Bugzilla Description: bluez: sdp-xml: BlueZ 5.86: unprivileged-local and adjacent-LE-peer leads to arbitrary code execution as root
CVSS Score:
CVSSv3 Score: 5.7
Vector:
CWE: CWE-843
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-53532
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2523172
Bugzilla Description: OpenEXR: OpenEXR: Denial of Service via crafted HTJ2K-compressed EXR file
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-68516
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2523170
Bugzilla Description: OpenEXR: OpenEXR: Denial of service via crafted HTJ2K-compressed EXR with invalid image-offset
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-17113
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2506872
Bugzilla Description: cri-o: CRI-O: unvalidated image env var causes daemon crash
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-1287
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-75509
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2523102
Bugzilla Description: joserfc: joserfc: Issuer-validation bypass via array-valued claims
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-480
Affected Packages:
Package States: Lightspeed Core,Migration Toolkit for Applications 8,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux command line assistant,Red Hat Hardened Images,Red Hat OpenShift Virtualization 4,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-76098
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2523100
Bugzilla Description: mistune: Mistune: Denial of Service via excessive emphasis markers in Markdown
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Migration Toolkit for Applications 8,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-63621
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2522066
Bugzilla Description: org.apache.camel/camel-knative: Apache Camel Knative: Header injection vulnerability allows server-side request forgery
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-791
Affected Packages:
Package States: OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat build of Apache Camel for Spring Boot 4,
Full Details
CVE document

CVE-2026-66908
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2522058
Bugzilla Description: org.apache.camel/camel-platform-http-main: org.apache.camel/camel-main: Apache Camel: Improper authentication allows JWT bypass in Platform HTTP Main component
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-305
Affected Packages:
Package States: OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-19685
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2515042
Bugzilla Description: NetworkManager: NetworkManager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing WPA-Enterprise server validation bypass (incomplete fix for CVE-2025-9615)
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-71366
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:59153, RHSA-2026:59155, RHSA-2026:59135, RHSA-2026:59136,
Bugzilla: 2511902
Bugzilla Description: awx: notification backends allow SSRF and credential leakage
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-918
Affected Packages: automation-controller-0:4.7.16-1.el9ap,ansible-automation-platform-26/controller-rhel9:1787244009,automation-controller-0:4.6.32-1.el8ap,ansible-automation-platform-27/controller-rhel9:1787220257,automation-controller-0:4.6.32-1.el9ap,
Package States:
Full Details
CVE document

CVE-2026-71364
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:59153, RHSA-2026:59155, RHSA-2026:59135, RHSA-2026:59136,
Bugzilla: 2511900
Bugzilla Description: awx: project archive extraction allows path traversal file writes
CVSS Score:
CVSSv3 Score: 7.2
Vector:
CWE: CWE-22
Affected Packages: automation-controller-0:4.7.16-1.el9ap,ansible-automation-platform-26/controller-rhel9:1787244009,automation-controller-0:4.6.32-1.el8ap,ansible-automation-platform-27/controller-rhel9:1787220257,automation-controller-0:4.6.32-1.el9ap,
Package States:
Full Details
CVE document

CVE-2026-76848
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2521891
Bugzilla Description: typeorm: TypeORM: Information disclosure via SQL injection in SelectQueryBuilder.distinctOn
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-89
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-76845
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2521870
Bugzilla Description: adm-zip: adm-zip: Arbitrary File Overwrite via Symlink Following
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-59
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-76844
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2521896
Bugzilla Description: webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal
CVSS Score:
CVSSv3 Score: 8.6
Vector:
CWE: CWE-22
Affected Packages:
Package States: Gatekeeper 3,Migration Toolkit for Containers,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat 3scale API Management Platform 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 4,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat Quay 3,Red Hat Satellite 6,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-78701
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2523232
Bugzilla Description: 389-ds-base: 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Directory Server 11,Red Hat Directory Server 12,Red Hat Directory Server 13,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-10582
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2521803
Bugzilla Description: hugo: github.com/gohugoio/hugo: Hugo: Server-Side Request Forgery (SSRF) leading to information disclosure.
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-59295
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2521797
Bugzilla Description: io.micrometer/micrometer-core: Micrometer Instrumentation for Apache HttpAsyncClient: Denial of Service via asynchronous request failures
CVSS Score:
Vector:
CWE: CWE-772
Affected Packages:
Package States: Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-76172
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:60856, RHSA-2026:60855, RHSA-2026:60866,
Bugzilla: 2521798
Bugzilla Description: fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-76
Affected Packages: grafana13-1-main-13.1.3-0.3.hum1,grafana13-2-main-13.2.0-0.1.2.hum1,grafana12-4-main-12.4.9-0.4.hum1,
Package States: Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apicurio Registry 3,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-75975
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:60856, RHSA-2026:60855, RHSA-2026:60866,
Bugzilla: 2521779
Bugzilla Description: fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-918
Affected Packages: grafana13-1-main-13.1.3-0.3.hum1,grafana13-2-main-13.2.0-0.1.2.hum1,grafana12-4-main-12.4.9-0.4.hum1,
Package States: Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apicurio Registry 3,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-75899
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:60856, RHSA-2026:60855, RHSA-2026:60866,
Bugzilla: 2521778
Bugzilla Description: fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-140
Affected Packages: grafana13-1-main-13.1.3-0.3.hum1,grafana13-2-main-13.2.0-0.1.2.hum1,grafana12-4-main-12.4.9-0.4.hum1,
Package States: Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apicurio Registry 3,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-75931
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:60856, RHSA-2026:60855, RHSA-2026:60866,
Bugzilla: 2521777
Bugzilla Description: fast-uri: fast-uri: Host confusion via skipped IDN canonicalization
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-444
Affected Packages: grafana13-1-main-13.1.3-0.3.hum1,grafana13-2-main-13.2.0-0.1.2.hum1,grafana12-4-main-12.4.9-0.4.hum1,
Package States: Migration Toolkit for Applications 8,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apicurio Registry 3,Red Hat Build of Podman Desktop,Red Hat Connectivity Link 1,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Discovery 2,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-78323
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2521775
Bugzilla Description: jss: jss: JSSTrustManager does not verify NSS trust flags on CA certificates
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Certificate System 10,Red Hat Certificate System 11,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-78161
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2521703
Bugzilla Description: libwebsockets: libwebsockets: Out-of-bounds write in LECP CBOR Recording
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: A-MQ Interconnect 1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,Red Hat Service Interconnect 2,
Full Details
CVE document

CVE-2026-78322
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2521767
Bugzilla Description: file-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and RAR handlers
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2026-78367
Severity: moderate
Released on: 24/08/2026
Advisory:
Bugzilla: 2521857
Bugzilla Description: rpm: rpmbuild getTarSpec() crafted tar member name → macro injection
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-78376
Severity: important
Released on: 24/08/2026
Advisory:
Bugzilla: 2521858
Bugzilla Description: webkitgtk: use-after-free of JSCValue function parameters
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-52492
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:53467,
Bugzilla: 2523134
Bugzilla Description: libtiff: libtiff: Arbitrary code execution via crafted TIFF image
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-787
Affected Packages: libtiff-main-4.7.2-2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-52490
Severity: important
Released on: 24/08/2026
Advisory: RHSA-2026:53467,
Bugzilla: 2523148
Bugzilla Description: libtiff: libtiff: Arbitrary code execution via process_command_opts() function
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-78
Affected Packages: libtiff-main-4.7.2-2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-70626
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521338
Bugzilla Description: nltk: NLTK: Information disclosure via symlink escape in CorpusReader.open()
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-66393
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521342
Bugzilla Description: nltk: NLTK: Denial of Service via unbounded recursion in JSONTaggedDecoder
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-606
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-65915
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521343
Bugzilla Description: nltk: NLTK: Arbitrary file read due to logic bug in FileSystemPathPointer
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-63311
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521348
Bugzilla Description: nltk: NLTK: Server-Side Request Forgery bypass via DNS resolution failures
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-918
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-62388
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521328
Bugzilla Description: NLTK: NLTK: Bypass of path traversal and pickle deserialization protections due to insecure default configuration
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1188
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-62385
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521333
Bugzilla Description: nltk: NLTK: Information disclosure through path traversal
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-62384
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521349
Bugzilla Description: nltk: NLTK: Information Disclosure via Symlink Sandbox Bypass
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-41
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-62383
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521332
Bugzilla Description: nltk: nltk: Information disclosure via symlink in IPIPANCorpusReader
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-71514
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521318
Bugzilla Description: nltk: NLTK: Information disclosure via path traversal in CrubadanCorpusReader
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-71513
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521317
Bugzilla Description: nltk: NLTK: Remote Code Execution via AllowlistUnpickler dotted-name bypass
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-502
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-62243
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521309
Bugzilla Description: io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-295
Affected Packages:
Package States: Exploit Intelligence,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat AMQ Broker 7,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat build of Quarkus,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Data Grid 8,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-74584
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521352
Bugzilla Description: kernel: RDMA/bnxt_re: zero shared page before exposing to userspace
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74595
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521355
Bugzilla Description: kernel: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-628
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74607
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521356
Bugzilla Description: kernel: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-366
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74625
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521357
Bugzilla Description: kernel: netfilter: bridge: release template ct on non-IP path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74638
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521358
Bugzilla Description: kernel: drm/v3d: Serialize the scheduler timeout handlers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74729
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521359
Bugzilla Description: kernel: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74730
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521360
Bugzilla Description: kernel: NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74664
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521361
Bugzilla Description: kernel: net: openvswitch: reallocate update replies for mismatched IDs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-131
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74677
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521362
Bugzilla Description: kernel: net: usb: ipheth: fix carrier_work UAF on disconnect
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74666
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521363
Bugzilla Description: kernel: packet: synchronize pressure clearing with ring reconfiguration
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74683
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521364
Bugzilla Description: kernel: Input: evdev - sanitize event type index when fetching event masks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74624
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521365
Bugzilla Description: kernel: netfilter: nf_conntrack: defer invalid log until after unlock
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74700
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521366
Bugzilla Description: kernel: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-763
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74668
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521367
Bugzilla Description: kernel: packet: use consistent hard_header_len in TX_RING send path
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-131
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74712
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521368
Bugzilla Description: kernel: vdpa/mlx5: Fix buffer length in create_direct_keys()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74715
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521369
Bugzilla Description: kernel: bpf: Fix netns reference imbalance in conntrack kfuncs
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74599
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521370
Bugzilla Description: kernel: mm/ptdump: always stabilise against page table freeing using init_mm
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74632
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521371
Bugzilla Description: kernel: mm/huge_memory: fix huge_zero_pfn race
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74606
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521372
Bugzilla Description: kernel: eventfs: Fix use-after-free in eventfs_remove_rec()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74621
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521373
Bugzilla Description: kernel: net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74648
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521374
Bugzilla Description: kernel: staging: rtl8723bs: validate monitor transmit frame lengths
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74669
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521375
Bugzilla Description: kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74675
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521376
Bugzilla Description: kernel: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74654
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521377
Bugzilla Description: kernel: serial: 8250_dma: Clear stale RX state on shutdown
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74714
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521378
Bugzilla Description: kernel: bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74727
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521379
Bugzilla Description: kernel: ovpn: skip rehash for peers already removed from by_id
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74643
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521380
Bugzilla Description: kernel: samples/damon/mtier: error out for zero quota goal target values
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74673
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521381
Bugzilla Description: kernel: Input: evdev - fix information leak in evdev_pass_values()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74695
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521382
Bugzilla Description: kernel: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74649
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521383
Bugzilla Description: kernel: staging: rtl8723bs: fix missing shared-key auth challenge length check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74588
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521384
Bugzilla Description: kernel: sctp: keep chunk->transport in step with the list it is queued on
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74650
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521385
Bugzilla Description: kernel: staging: rtl8723bs: fix OOB read in WMM_param_handler()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-74646
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521386
Bugzilla Description: kernel: misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-414
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74717
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521387
Bugzilla Description: kernel: net/mlx5: fw_tracer, return NULL on create error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74661
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521388
Bugzilla Description: kernel: mac802154: fix netdev use-after-free in beacon worker
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74663
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521389
Bugzilla Description: kernel: net/sched: reject overly deep qdisc hierarchies
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74680
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521390
Bugzilla Description: kernel: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74699
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521391
Bugzilla Description: kernel: drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74719
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521392
Bugzilla Description: kernel: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74657
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521393
Bugzilla Description: kernel: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74679
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521394
Bugzilla Description: kernel: usb: gadget: f_ncm: Use unsigned int for ndp_index
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-74591
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521395
Bugzilla Description: kernel: mm/filemap: __filemap_add_folio() restore index before retrying
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74656
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521396
Bugzilla Description: kernel: ipv4: fix use-after-free in fib_nhc_update_mtu()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74671
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521397
Bugzilla Description: kernel: ima: fix out-of-bounds read in xattr_verify()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74703
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521398
Bugzilla Description: kernel: vhost-scsi: Validate T10 PI scatterlist counts
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74585
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521399
Bugzilla Description: kernel: thunderbolt: Bound the DROM dual link port number before indexing sw->ports
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-823
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74589
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521400
Bugzilla Description: kernel: bpf, sockmap: Fix sk_redir use-after-free in send verdict
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74701
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521401
Bugzilla Description: kernel: net/openvswitch: check Ethernet header length in key_extract()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74614
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521402
Bugzilla Description: kernel: vsock/virtio: read virtqueues under worker locks
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-820
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74593
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521403
Bugzilla Description: kernel: sched_ext: Take cgroup_lock() first in scx_cgroup_lock()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74711
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521404
Bugzilla Description: kernel: hwmon: (pmbus) Fix type confusion in notification logic
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-843
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74726
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521405
Bugzilla Description: kernel: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74615
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521406
Bugzilla Description: kernel: vxlan: do not arm the ageing timer on a device that is down
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74693
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521407
Bugzilla Description: kernel: net: prestera: validate firmware header length
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74733
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521408
Bugzilla Description: kernel: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74597
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521409
Bugzilla Description: kernel: ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74651
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521410
Bugzilla Description: kernel: staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74629
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521411
Bugzilla Description: kernel: net/dibs: Correct freeing of dmb_clientid_arr
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74718
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521412
Bugzilla Description: kernel: devlink: fix net namespace reference leak in reload
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74631
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521413
Bugzilla Description: kernel: net: smc: fix splice entry lifetime imbalance in smc_rx_splice
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74642
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521414
Bugzilla Description: kernel: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74608
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521415
Bugzilla Description: kernel: smb: client: Fix use-after-free in cifs_try_adding_channels()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74635
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521416
Bugzilla Description: kernel: fbdev: bitblit: bound-check glyph index in bit_cursor()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74617
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521417
Bugzilla Description: kernel: dibs: initialise dibs->lock in dibs_dev_alloc()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74681
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521418
Bugzilla Description: kernel: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74586
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521419
Bugzilla Description: kernel: sctp: clear new_transport when removing a peer
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74702
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521420
Bugzilla Description: kernel: vhost-scsi: reject feature changes after endpoint
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74710
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521421
Bugzilla Description: kernel: xsk: require at least 16 bytes of TX metadata
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74603
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521422
Bugzilla Description: kernel: ptp: ocp: Fix board ID over-read
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74628
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521423
Bugzilla Description: kernel: net/x25: fix use-after-free of the socket by its timers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74689
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521424
Bugzilla Description: kernel: net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74598
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521425
Bugzilla Description: kernel: ipv6: fix Route Information option length validation
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74609
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521427
Bugzilla Description: kernel: tipc: read le->link under the node lock in tipc_node_link_down()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74716
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521428
Bugzilla Description: kernel: accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74672
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521429
Bugzilla Description: kernel: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74696
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521430
Bugzilla Description: kernel: tcp: fix TFO max_qlen accounting across reuseport migration
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74723
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521431
Bugzilla Description: kernel: btrfs: lzo: reject inline extents without valid headers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74684
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521432
Bugzilla Description: kernel: net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74682
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521433
Bugzilla Description: kernel: ALSA: usb-audio: fix OOB write on Type II inbound URBs
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74587
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521434
Bugzilla Description: kernel: sctp: fix use-after-free of cached ASCONF chunk
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74594
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521435
Bugzilla Description: kernel: sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-364
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74641
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521436
Bugzilla Description: kernel: ALSA: usx2y: bound the hwdep mmap fault offset
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74596
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521437
Bugzilla Description: kernel: fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-253
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74688
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521438
Bugzilla Description: kernel: sctp: clear control chunk transport if it is being removed
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74694
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521439
Bugzilla Description: kernel: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74713
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521440
Bugzilla Description: kernel: vhost_iotlb: bound map allocation in add_range
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74731
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521441
Bugzilla Description: kernel: sched_ext: Skip sub-disable teardown for never-linked sub-schedulers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-364
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74686
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521442
Bugzilla Description: kernel: rqspinlock: Reset tail when preserving queue on deadlock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-821
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74706
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521443
Bugzilla Description: kernel: bnge: Fix NULL pointer dereference in aux device release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74645
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521444
Bugzilla Description: kernel: mm/damon/lru_sort: error out for >10000 active_mem_bp
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74722
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521445
Bugzilla Description: kernel: btrfs: fix memory leak in btrfs_do_encoded_write()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74604
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521446
Bugzilla Description: kernel: Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74619
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521447
Bugzilla Description: kernel: ovl: don't warn when the mount is completed from another user namespace
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74655
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521448
Bugzilla Description: kernel: serial: qcom-geni: fix TX DMA buffer flush
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74670
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521449
Bugzilla Description: kernel: ipvs: stop estimator after disabled calc phase
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74653
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521450
Bugzilla Description: kernel: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74678
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521451
Bugzilla Description: kernel: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74704
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521452
Bugzilla Description: kernel: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74707
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521453
Bugzilla Description: kernel: xsk: validate metadata when processing requests
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74590
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521454
Bugzilla Description: kernel: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-663
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74728
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521455
Bugzilla Description: kernel: xfs: handle NULL b_addr in xfs_buf_free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74709
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521456
Bugzilla Description: kernel: xsk: clear metadata pointer when no timestamp is requested
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74647
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521457
Bugzilla Description: kernel: misc: fastrpc: Remove buffer from list prior to unmap operation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74721
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521458
Bugzilla Description: kernel: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74665
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521459
Bugzilla Description: kernel: net: fix skb length accounting after generic XDP frag adjustment
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74634
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521460
Bugzilla Description: kernel: ring-buffer: Prevent subbuf order change when resizing is disabled
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74616
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521461
Bugzilla Description: kernel: xdp: reject clones that overrun skb_shared_info tailroom
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74659
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521462
Bugzilla Description: kernel: net: bridge: mrp: fix uninitialised bytes on the wire
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74662
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521463
Bugzilla Description: kernel: inet: frags: publish queues before arming timer
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74601
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521464
Bugzilla Description: kernel: ring-buffer: Use current_context for safe per-CPU buffer swap
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74633
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521465
Bugzilla Description: kernel: tracing: Fix NULL pointer dereference in module event cache removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74611
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521466
Bugzilla Description: kernel: tls: rx: restore msg_iter before TLS 1.3 optimistic retry
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74639
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521467
Bugzilla Description: kernel: ALSA: us144mkii: re-anchor capture URBs on resubmission
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74602
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521468
Bugzilla Description: kernel: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74618
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521469
Bugzilla Description: kernel: binfmt_misc: don't warn when the mount is completed from another user namespace
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74687
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521470
Bugzilla Description: kernel: watchdog: at91sam9_wdt: prevent timer rearm during teardown
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74644
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521471
Bugzilla Description: kernel: mm/damon/ops-common: putback folios on invalid migrate nid
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74622
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521472
Bugzilla Description: kernel: net: atlantic: free RX pages of consumed but not refilled buffers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74600
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521473
Bugzilla Description: kernel: mm/page_table_check: skip special zero mappings
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74676
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521474
Bugzilla Description: kernel: vt: add permission check for KDSKBMETA ioctl
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1220
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74630
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521475
Bugzilla Description: kernel: ipv6: prevent in6_dev_get() from resurrecting inet6_dev
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74623
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521476
Bugzilla Description: kernel: net: atlantic: free stranded TX buffers on ring deinit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-771
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74720
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521477
Bugzilla Description: kernel: bpf: Preserve pointer state for commuted arithmetic
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-823
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74697
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521478
Bugzilla Description: kernel: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-805
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74640
Severity: important
Released on: 22/08/2026
Advisory:
Bugzilla: 2521479
Bugzilla Description: kernel: ALSA: FCP: fix OOB write in fcp_meter_ctl_get()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74674
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521480
Bugzilla Description: kernel: mm: fix incorrect flush address in direct page table reclaim
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-823
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74724
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521481
Bugzilla Description: kernel: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74620
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521482
Bugzilla Description: kernel: net/sched: act_gact, act_police: range check the fallback control action
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74612
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521483
Bugzilla Description: kernel: veth: fix skb length accounting after XDP frag adjustment
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74613
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521484
Bugzilla Description: kernel: vsock/virtio: avoid refilling the RX queue after teardown
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74732
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521485
Bugzilla Description: kernel: drm/amd/display: Check for tg ops in dce110_set_avmute
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74652
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521486
Bugzilla Description: kernel: serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74626
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521487
Bugzilla Description: kernel: NTB: ntb_netdev: Preserve RX queue depth on allocation failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-826
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74592
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521488
Bugzilla Description: kernel: ima: Instantiate file_truncate and path_truncate hooks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-222
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74605
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521489
Bugzilla Description: kernel: eventfs: Use children field for rcu head and add memory barriers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74667
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521490
Bugzilla Description: kernel: net/packet: reset the MAC header on the packet-socket transmit path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74698
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521491
Bugzilla Description: kernel: net/mlx5e: fix BQL reset on SQ re-activation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74725
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521492
Bugzilla Description: kernel: enic: fix tx_hang_reset use-after-free on device removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-364
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74685
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521493
Bugzilla Description: kernel: hwmon: (ltc4282) Clamp negative current limits
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74660
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521495
Bugzilla Description: kernel: netfilter: ebt_nflog: pin the NFLOG backend
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74692
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521496
Bugzilla Description: kernel: net/smc: fix TOCTOU race between smc_listen_out() and listener close
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74610
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521497
Bugzilla Description: kernel: tls: don't leave a full plaintext sk_msg ring unpushed
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74705
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521498
Bugzilla Description: kernel: udp: fix potential use-after-free in tunnel segmentation
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74708
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521499
Bugzilla Description: kernel: xsk: validate launch-time metadata size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1284
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74658
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521500
Bugzilla Description: kernel: futex: Prevent robust futex exit race some more
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74637
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521501
Bugzilla Description: kernel: perf/core: Fix group leader use-after-free after sibling detach
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74636
Severity: low
Released on: 22/08/2026
Advisory:
Bugzilla: 2521502
Bugzilla Description: kernel: tracing: Fix race between update_event_fields and, event_define_fields
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-366
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-74627
Severity: moderate
Released on: 22/08/2026
Advisory:
Bugzilla: 2521503
Bugzilla Description: kernel: net: devmem: prevent net-iov / page mixing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-843
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-44517
Severity: moderate
Released on: 21/08/2026
Advisory:
Bugzilla: 2521191
Bugzilla Description: github.com/containers/buildah: Buildah: Build breakout via malicious Git repository or tar archive
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-77219
Severity: important
Released on: 21/08/2026
Advisory:
Bugzilla: 2521196
Bugzilla Description: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-66786
Severity: moderate
Released on: 21/08/2026
Advisory:
Bugzilla: 2507531
Bugzilla Description: submariner: submariner: ipsec.conf stanza injection via remote-supplied CableName and Subnets
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-94
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-54789
Severity: important
Released on: 21/08/2026
Advisory:
Bugzilla: 2521051
Bugzilla Description: mod_auth_openidc: mod_auth_openidc: Denial of Service via malformed state cookie parsing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-49114
Severity: important
Released on: 21/08/2026
Advisory:
Bugzilla: 2521048
Bugzilla Description: onnx: ONNX: Arbitrary file write via symlink following and path traversal
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-63125
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521013
Bugzilla Description: incus: Incus vulnerable to root RCE via image backup.yaml symlink
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-61
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-62941
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521017
Bugzilla Description: incus: Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-367
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-62940
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521016
Bugzilla Description: incus: Incus has a project restriction bypass via instance migration config override
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-62867
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521014
Bugzilla Description: incus: Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-88
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-48769
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521021
Bugzilla Description: incus: Incus has an arbitrary file write on its client due to trusted image hash
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-345
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-48755
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521019
Bugzilla Description: incus: Incus has an argument injection in backup compression algorithm leading to AFW and ACE
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-88
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-48753
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521008
Bugzilla Description: incus: Incus has an arbitrary file write via path traversal in S3 multipart upload
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-22
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-48752
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521009
Bugzilla Description: incus: Incus has arbitrary file read+write on host via templates/ symlink in malicious image
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-61
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-48751
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521007
Bugzilla Description: incus: Incus has a restricted project bypass leading to arbitrary command execution
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-48750
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521003
Bugzilla Description: incus: Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-61
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-48749
Severity: critical
Released on: 21/08/2026
Advisory:
Bugzilla: 2521004
Bugzilla Description: incus: Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
CVSS Score:
CVSSv3 Score: 9.9
Vector:
CWE: CWE-61
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-59296
Severity: moderate
Released on: 21/08/2026
Advisory:
Bugzilla: 2520949
Bugzilla Description: io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-93
Affected Packages:
Package States: Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-74866
Severity: moderate
Released on: 21/08/2026
Advisory:
Bugzilla: 2520904
Bugzilla Description: @fastify/busboy: @fastify/busboy: CRLF injection via multipart Content-Disposition filename and name
CVSS Score:
CVSSv3 Score: 5.8
Vector:
CWE: CWE-93
Affected Packages:
Package States: Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document