Red Hat Enterprise Linux
Red Hat Enterprise Linux provides a flexible and stable foundation to support hybrid cloud innovation. Deploy applications and critical workloads faster with a consistent experience across physical, virtual, private, public cloud, and edge deployments.
browse_doc
10.2 Release NotesRelease Notes
Interactively installing RHEL from installation mediaInstalling RHEL
Upgrading from RHEL 9 to RHEL 10Upgrading and converting to RHEL
Composing a customized RHEL system imageComposing RHEL images using image builder
Automating system administration by using RHEL system rolesSystem administration
Security hardeningSecurity
Configuring and managing networkingNetworking
latest_security
| severity | advisory_cve | synopsis | date |
|---|---|---|---|
| severity Low | advisory_cveCVE-2026-72038 | synopsis A flaw was found in the `liquidio` network driver within the Linux kernel. This vulnerability occurs when the `cn23xx_get_pf_num()` function fails, leading to Base Address Register (BAR) resources not being properly unmapped. This resource leak could potentially be exploited by a local attacker to cause a Denial of Service (DoS) or system instability. | date |
| severity Low | advisory_cveCVE-2026-72173 | synopsis A flaw was found in the Linux kernel's memory management unit (MMU). The `pagemap_pmd_range_thp()` function incorrectly issued a warning when encountering certain non-present Page Middle Directory (PMD) entries. This issue arose because an assertion related to migration-only softleaf entries became outdated after the introduction of device-private PMD entries. While not directly exploitable for arbitrary code execution or privilege escalation, this flaw could lead to misleading diagnostic information within the kernel. | date |
| severity Low | advisory_cveCVE-2026-72278 | synopsis A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) for arm64 systems. This vulnerability occurs when a guest operating system attempts to access the Virtualization Nested Control Register (VNCR) page. If the guest reads from VNCR before writing to it, KVM may incorrectly handle the memory access, potentially leading to unexpected behavior or instability within the virtualized environment. | date |
| severity Low | advisory_cveCVE-2026-72127 | synopsis A flaw was found in the Linux kernel's `netdev-genl` component. A local user in a child process ID (PID) namespace can issue a `NETDEV_CMD_NAPI_GET` command. This allows the user to observe the global PID of a NAPI kernel thread, even though the thread should not be visible within their PID namespace. This could lead to an information disclosure, potentially bypassing PID namespace isolation. | date |
| severity Important | advisory_cveCVE-2026-59650 | synopsis A flaw was found in Bouncy Castle for Java. This vulnerability allows an attacker to manipulate the Diffie-Hellman (DH) key agreement process by providing an unvalidated value. This could lead to a compromised cryptographic key exchange, potentially enabling an attacker to decrypt sensitive communications or impersonate legitimate users. The issue affects both Bouncy Castle for Java and Bouncy Castle for Java LTS. | date |
top_resources
Upgrade best practices
Describes the best practices and recommendations in order to plan and upgrade RHEL using Leapp.
Red Hat Enterprise Linux Upgrade Helper
Upgrade from Red Hat Enterprise Linux 8 to Red Hat Enterprise Linux 9.
Knowledgebase
Access articles and solutions to find answers to your questions.
Troubleshooting
Connect to the right information to self-solve issues quickly and efficiently.
