Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Medium	May 22, 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Medium	May 22, 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critical	May 22, 2026
CVE-2026-43501	In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when…	9.8 Critical	May 21, 2026
CVE-2026-43494	In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails…	7.8 High	May 21, 2026
CVE-2026-9149	Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file	6.5 Medium	May 20, 2026
CVE-2026-9150	Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums	6.5 Medium	May 20, 2026
CVE-2026-8632	A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software	8.5 High	May 20, 2026
CVE-2026-8631	A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software	9.3 Critical	May 20, 2026
CVE-2026-5947	Undefined behavior may result due to a race condition leading to a use-after-free violation	7.5 High	May 20, 2026
CVE-2026-5946	Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet…	7.5 High	May 20, 2026
CVE-2026-3593	A use-after-free vulnerability exists within the DNS-over-HTTPS implementation	7.4 High	May 20, 2026
CVE-2026-3039	BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive…	7.5 High	May 20, 2026
CVE-2026-29518	Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling…	7.3 High	May 20, 2026
CVE-2026-44390	NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets…	6.9 Medium	May 20, 2026
CVE-2026-42959	NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that…	8.7 High	May 20, 2026
CVE-2026-42944	NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when…	8.7 High	May 20, 2026
CVE-2026-42534	NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its…	6.9 Medium	May 20, 2026
CVE-2026-41292	NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to…	6.6 Medium	May 20, 2026
CVE-2026-33278	NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables…	9.1 Critical	May 20, 2026
CVE-2026-9064	389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)	7.5 High	May 20, 2026
CVE-2026-47783	In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because…	8.1 High	May 20, 2026
CVE-2026-43618	Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit…	6.1 Medium	May 20, 2026
CVE-2026-8975	Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150	8.8 High	May 19, 2026

Other Red Hat products