Vulnerabilities of Red Hat Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-107935	Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose	9.3 Critical	Oct 9, 2026
CVE-2026-86345	389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result	9.0 Critical	Oct 1, 2026
CVE-2026-18922	A flaw was found in 389 Directory Server	9.8 Critical	Sep 7, 2026
CVE-2026-76578	Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci	9.8 Critical	Sep 7, 2026
CVE-2026-11861	Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships	9.6 Critical	Aug 20, 2026
CVE-2026-14544	Hplip: incomplete fix for cve-2026-8631	9.8 Critical	Jul 3, 2026
CVE-2026-53175	In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the…	9.8 Critical	Jun 25, 2026
CVE-2026-53176	In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than…	9.8 Critical	Jun 25, 2026
CVE-2026-53006	In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr…	9.8 Critical	Jun 24, 2026
CVE-2026-53002	In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace…	9.8 Critical	Jun 24, 2026
CVE-2026-52993	In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append()…	9.8 Critical	Jun 24, 2026
CVE-2026-52989	In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec()…	9.8 Critical	Jun 24, 2026
CVE-2026-52955	In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in…	9.8 Critical	Jun 24, 2026
CVE-2026-52924	In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling…	9.8 Critical	Jun 24, 2026
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026
CVE-2026-12296	Sandbox escape in the Security: Process Sandboxing component	9.6 Critical	Jun 16, 2026
CVE-2026-12295	Sandbox escape in the DOM: Navigation component	9.6 Critical	Jun 16, 2026
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-12293	Use-after-free in the Graphics: WebGPU component	9.8 Critical	Jun 16, 2026
CVE-2026-49261	MariaDB server is a community developed fork of MySQL server	10.0 Critical	Jun 11, 2026
CVE-2026-46316	In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache…	9.3 Critical	Jun 9, 2026
CVE-2025-10263	Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,…	9.1 Critical	Jun 9, 2026
CVE-2026-46244	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In…	9.1 Critical	Jun 3, 2026
CVE-2026-46195	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building…	9.8 Critical	May 28, 2026
CVE-2026-4408	Samba: remote code execution in samr	9.0 Critical	May 28, 2026

Other Red Hat products