Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-43112	In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in…	8.8 High	May 6, 2026
CVE-2026-28780	Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server	Not rated	May 5, 2026
CVE-2026-25243	Redis is an in-memory data structure store	7.7 High	May 5, 2026
CVE-2026-23631	Redis is an in-memory data structure store	6.1 Medium	May 5, 2026
CVE-2026-23479	Redis is an in-memory data structure store	7.7 High	May 5, 2026
CVE-2026-34002	Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling	6.1 Medium	May 5, 2026
CVE-2026-34000	Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.	6.1 Medium	May 5, 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 High	May 5, 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 High	May 4, 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-43964	Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash…	3.7 Low	May 4, 2026
CVE-2026-23918	Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol	Not rated	May 4, 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 High	May 4, 2026
CVE-2026-37459	An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS)…	7.5 High	May 4, 2026
CVE-2025-70071	An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp,…	5.9 Medium	May 4, 2026
CVE-2025-70069	An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and…	7.5 High	May 4, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critical	May 1, 2026
CVE-2026-31709	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before…	8.8 High	May 1, 2026
CVE-2026-31703	In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in…	7.8 High	May 1, 2026
CVE-2026-37457	An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of…	7.5 High	May 1, 2026
CVE-2026-5403	SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution	7.8 High	Apr 30, 2026
CVE-2026-5656	Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code…	7.0 High	Apr 30, 2026
CVE-2026-5405	RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible…	7.8 High	Apr 30, 2026

Other Red Hat products