Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-52989	In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec()…	9.8 Critical	Jun 24, 2026
CVE-2026-52987	In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq…	7.8 High	Jun 24, 2026
CVE-2026-52976	In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in…	7.8 High	Jun 24, 2026
CVE-2026-52973	In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private…	7.8 High	Jun 24, 2026
CVE-2026-52972	crypto: af_alg - Cap AEAD AD length to 0x80000000	7.0 High	Jun 24, 2026
CVE-2026-52969	In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in…	7.0 High	Jun 24, 2026
CVE-2026-52955	In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in…	9.8 Critical	Jun 24, 2026
CVE-2026-52952	In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARN_ON in…	8.8 High	Jun 24, 2026
CVE-2026-52951	In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races…	7.8 High	Jun 24, 2026
CVE-2026-52950	In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: fix UAF with retry loop Retry…	7.8 High	Jun 24, 2026
CVE-2026-52943	In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in…	7.8 High	Jun 24, 2026
CVE-2026-52924	In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling…	9.8 Critical	Jun 24, 2026
CVE-2026-52923	In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID…	7.8 High	Jun 24, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-12892	Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser	4.4 Medium	Jun 23, 2026
CVE-2026-12891	Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser	4.3 Medium	Jun 23, 2026
CVE-2026-11820	Community.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query string	6.5 Medium	Jun 23, 2026
CVE-2026-11819	Community.general: community.general keyring_info — os keyring passphrase returned in plaintext	5.5 Medium	Jun 23, 2026
CVE-2026-12969	Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation	5.3 Medium	Jun 23, 2026
CVE-2026-55654	Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	3.7 Low	Jun 23, 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Medium	Jun 23, 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Medium	Jun 23, 2026
CVE-2026-12549	Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver	4.8 Medium	Jun 22, 2026
CVE-2026-12725	Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	5.9 Medium	Jun 22, 2026
CVE-2026-56210	Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id	7.1 High	Jun 19, 2026

Other Red Hat products