Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-52943	In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in…	7.8 High	Jun 24, 2026
CVE-2026-52924	In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling…	9.8 Critical	Jun 24, 2026
CVE-2026-52923	In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID…	7.8 High	Jun 24, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-12892	Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser	4.4 Medium	Jun 23, 2026
CVE-2026-12891	Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser	4.3 Medium	Jun 23, 2026
CVE-2026-11820	Community.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query string	6.5 Medium	Jun 23, 2026
CVE-2026-11819	Community.general: community.general keyring_info — os keyring passphrase returned in plaintext	5.5 Medium	Jun 23, 2026
CVE-2026-12969	Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation	5.3 Medium	Jun 23, 2026
CVE-2026-55654	Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	3.7 Low	Jun 23, 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Medium	Jun 23, 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Medium	Jun 23, 2026
CVE-2026-12549	Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver	4.8 Medium	Jun 22, 2026
CVE-2026-12725	Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	5.9 Medium	Jun 22, 2026
CVE-2026-56210	Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id	7.1 High	Jun 19, 2026
CVE-2026-56211	Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames	7.1 High	Jun 19, 2026
CVE-2026-56208	Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode	7.6 High	Jun 19, 2026
CVE-2026-56209	Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack	7.1 High	Jun 19, 2026
CVE-2026-3195	A flaw was found in QEMU	7.4 High	Jun 19, 2026
CVE-2026-3196	An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest	5.5 Medium	Jun 19, 2026
CVE-2026-52910	In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace…	7.8 High	Jun 19, 2026
CVE-2026-45696	OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture…	8.3 High	Jun 18, 2026
CVE-2026-11791	389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()	5.0 Medium	Jun 18, 2026
CVE-2026-12505	Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall	7.8 High	Jun 18, 2026
CVE-2026-9697	Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or…	7.4 High	Jun 17, 2026

Other Red Hat products