Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-2243	Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing	5.1 Medium	Feb 19, 2026
CVE-2026-0665	An off-by-one error was found in QEMU's KVM Xen guest support	6.5 Medium	Feb 18, 2026
CVE-2025-8860	A flaw was found in QEMU in the uefi-vars virtual device	3.3 Low	Feb 18, 2026
CVE-2025-14876	A flaw was found in the virtio-crypto device of QEMU	5.5 Medium	Feb 18, 2026
CVE-2025-1272	The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode…	7.7 High	Feb 18, 2026
CVE-2025-0577	An insufficient entropy vulnerability was found in glibc	4.8 Medium	Feb 18, 2026
CVE-2026-22860	Rack is a modular Ruby web server interface	7.5 High	Feb 18, 2026
CVE-2026-24734	Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat	Not rated	Feb 17, 2026
CVE-2026-2447	Heap buffer overflow in libvpx	8.8 High	Feb 16, 2026
CVE-2026-23185	In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk…	7.8 High	Feb 14, 2026
CVE-2026-23111	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check…	7.8 High	Feb 13, 2026
CVE-2026-2443	Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure	5.3 Medium	Feb 13, 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 High	Feb 12, 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 High	Feb 12, 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 High	Feb 12, 2026
CVE-2026-20644	The issue was addressed with improved memory handling	6.5 Medium	Feb 11, 2026
CVE-2026-20652	The issue was addressed with improved memory handling	7.5 High	Feb 11, 2026
CVE-2026-20608	This issue was addressed through improved state management	5.5 Medium	Feb 11, 2026
CVE-2026-20635	The issue was addressed with improved memory handling	4.3 Medium	Feb 11, 2026
CVE-2026-20636	The issue was addressed with improved memory handling	6.5 Medium	Feb 11, 2026
CVE-2026-25990	Pillow is a Python imaging library	8.6 High	Feb 11, 2026
CVE-2026-1837	A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory	8.7 High	Feb 11, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 High	Feb 10, 2026
CVE-2026-25506	MUNGE is an authentication service for creating and validating user credentials	7.7 High	Feb 10, 2026

Other Red Hat products