Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-22860	Rack is a modular Ruby web server interface	7.5 High	Feb 18, 2026
CVE-2026-24734	Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat	Not rated	Feb 17, 2026
CVE-2026-2447	Heap buffer overflow in libvpx	8.8 High	Feb 16, 2026
CVE-2026-23185	In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk…	7.8 High	Feb 14, 2026
CVE-2026-23111	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check…	7.8 High	Feb 13, 2026
CVE-2026-2443	Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure	5.3 Medium	Feb 13, 2026
CVE-2026-2007	Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string	8.2 High	Feb 12, 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 High	Feb 12, 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 High	Feb 12, 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 High	Feb 12, 2026
CVE-2026-20644	The issue was addressed with improved memory handling	6.5 Medium	Feb 11, 2026
CVE-2026-20652	The issue was addressed with improved memory handling	7.5 High	Feb 11, 2026
CVE-2026-20608	This issue was addressed through improved state management	5.5 Medium	Feb 11, 2026
CVE-2026-20635	The issue was addressed with improved memory handling	4.3 Medium	Feb 11, 2026
CVE-2026-20636	The issue was addressed with improved memory handling	6.5 Medium	Feb 11, 2026
CVE-2026-1837	A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory	8.7 High	Feb 11, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 High	Feb 10, 2026
CVE-2026-25506	MUNGE is an authentication service for creating and validating user credentials	7.7 High	Feb 10, 2026
CVE-2026-25646	LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…	8.3 High	Feb 10, 2026
CVE-2025-35998	Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some…	7.9 High	Feb 10, 2026
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Feb 9, 2026
CVE-2026-24678	FreeRDP is a free implementation of the Remote Desktop Protocol	8.7 High	Feb 9, 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Medium	Feb 9, 2026
CVE-2026-1709	A flaw was found in Keylime	9.4 Critical	Feb 6, 2026

Other Red Hat products