Known vulnerabilities in Red Hat Enterprise Linux 9.6 Extended Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-25243 | Redis is an in-memory data structure store | 7.7 High | May 5, 2026 |
| CVE-2026-23631 | Redis is an in-memory data structure store | 6.1 Medium | May 5, 2026 |
| CVE-2026-23479 | Redis is an in-memory data structure store | 7.7 High | May 5, 2026 |
| CVE-2026-34002 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling | 6.1 Medium | May 5, 2026 |
| CVE-2026-34000 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. | 6.1 Medium | May 5, 2026 |
| CVE-2026-42154 | Prometheus is an open-source monitoring system and time series database | 7.5 High | May 4, 2026 |
| CVE-2026-42151 | Prometheus is an open-source monitoring system and time series database | 7.5 High | May 4, 2026 |
| CVE-2026-33846 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | 7.5 High | May 4, 2026 |
| CVE-2026-43037 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar… | 9.8 Critical | May 1, 2026 |
| CVE-2026-43038 | In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in… | 9.8 Critical | May 1, 2026 |
| CVE-2026-31709 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before… | 8.8 High | May 1, 2026 |
| CVE-2026-33845 | Gnutls: gnutls: denial of service via dtls zero-length fragment | 7.5 High | Apr 30, 2026 |
| CVE-2026-3833 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | 6.5 Medium | Apr 30, 2026 |
| CVE-2026-42198 | pgjdbc is an open source postgresql JDBC Driver | 7.5 High | Apr 29, 2026 |
| CVE-2026-37555 | An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec | 7.5 High | Apr 29, 2026 |
| CVE-2026-7323 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0 | 7.3 High | Apr 28, 2026 |
| CVE-2026-7322 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0 | 7.3 High | Apr 28, 2026 |
| CVE-2026-7320 | Information disclosure due to incorrect boundary conditions in the Audio/Video component | 7.5 High | Apr 28, 2026 |
| CVE-2026-31607 | In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in… | 9.8 Critical | Apr 24, 2026 |
| CVE-2026-41316 | ERB is a templating system for Ruby | 8.1 High | Apr 24, 2026 |
| CVE-2026-34003 | Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access | 7.8 High | Apr 23, 2026 |
| CVE-2026-34001 | Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption | 7.8 High | Apr 23, 2026 |
| CVE-2026-33999 | Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling | 7.8 High | Apr 23, 2026 |
| CVE-2026-31488 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode… | 7.8 High | Apr 22, 2026 |
| CVE-2026-41651 | PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a… | 8.8 High | Apr 22, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430