Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-85769	Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize	6.5 Medium	Sep 4, 2026
CVE-2026-85534	Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read	5.9 Medium	Sep 4, 2026
CVE-2026-81666	Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems	6.5 Medium	Sep 4, 2026
CVE-2026-81665	A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly	7.5 High	Sep 4, 2026
CVE-2026-85197	Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload	7.6 High	Sep 4, 2026
CVE-2026-84185	Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification	5.9 Medium	Sep 3, 2026
CVE-2026-71224	Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk	4.7 Medium	Sep 3, 2026
CVE-2026-71222	Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing	5.3 Medium	Sep 3, 2026
CVE-2026-71221	Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta	7.0 High	Sep 3, 2026
CVE-2026-71220	Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit	7.0 High	Sep 3, 2026
CVE-2026-71219	Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal	4.7 Medium	Sep 3, 2026
CVE-2026-85150	Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header	7.5 High	Sep 3, 2026
CVE-2026-84838	Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()	7.8 High	Sep 2, 2026
CVE-2026-84837	Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path	7.8 High	Sep 2, 2026
CVE-2026-78409	Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks	7.0 High	Sep 2, 2026
CVE-2026-78410	Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection	7.8 High	Sep 2, 2026
CVE-2026-78408	Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority	7.9 High	Sep 2, 2026
CVE-2026-53683	Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html	4.3 Medium	Sep 2, 2026
CVE-2026-84270	Gvfs: mtp: out-of-bounds read in do_read()	4.3 Medium	Sep 1, 2026
CVE-2026-84269	Gvfs: afp: heap-based buffer overflow in dsi read path	6.5 Medium	Sep 1, 2026
CVE-2026-84267	Gvfs: sftp: uninitialized heap disclosure in read_string()	4.3 Medium	Sep 1, 2026
CVE-2026-84268	Gvfs: sftp: heap-based buffer overflow in read_reply()	8.8 High	Sep 1, 2026
CVE-2026-84233	Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames	7.0 High	Sep 1, 2026
CVE-2026-53682	Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts	5.3 Medium	Sep 1, 2026
CVE-2026-11873	Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure	6.5 Medium	Sep 1, 2026

Other Red Hat products