Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-43658	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28905	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28883	A use-after-free issue was addressed with improved memory management	7.5 High	May 11, 2026
CVE-2026-28904	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28953	The issue was addressed with improved memory handling	7.5 High	May 11, 2026
CVE-2026-28903	The issue was addressed with improved memory handling	6.5 Medium	May 11, 2026
CVE-2026-28942	A use-after-free issue was addressed with improved memory management	6.5 Medium	May 11, 2026
CVE-2026-28902	The issue was addressed with improved memory handling	6.5 Medium	May 11, 2026
CVE-2026-28847	The issue was addressed with improved memory handling	8.8 High	May 11, 2026
CVE-2026-28955	The issue was addressed with improved memory handling	8.8 High	May 11, 2026
CVE-2026-5172	A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read…	7.3 High	May 11, 2026
CVE-2026-4892	A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute…	8.4 High	May 11, 2026
CVE-2026-4891	A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a…	5.3 Medium	May 11, 2026
CVE-2026-4890	A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of…	7.5 High	May 11, 2026
CVE-2026-4802	Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui	8.0 High	May 11, 2026
CVE-2026-43500	In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged…	7.8 High	May 11, 2026
CVE-2026-8177	XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing…	7.5 High	May 10, 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Low	May 10, 2026
CVE-2026-7263	In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly,…	6.3 Medium	May 10, 2026
CVE-2026-6104	In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is…	6.3 Medium	May 10, 2026
CVE-2026-6722	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP…	9.5 Critical	May 10, 2026
CVE-2026-7262	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP…	2.9 Low	May 10, 2026
CVE-2025-14179	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO…	7.4 High	May 10, 2026
CVE-2026-7568	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone()…	6.3 Medium	May 10, 2026
CVE-2026-42258	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby	5.8 Medium	May 9, 2026

Other Red Hat products