Red Hat Enterprise Linux 10 vulnerabilities and CVEs
Known vulnerabilities affecting Red Hat Enterprise Linux 10, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
49 vulnerabilities tracked. 2 with public exploit code.
- 9.8 A flaw was found in FreeIPA.
- 9.6 A flaw was found in FreeIPA.
- 8.8 A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via…
- 8.8 A flaw was found in bubblewrap.
- 8.7 A privilege escalation flaw was found in FreeIPA.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.5 A flaw was found in libxml2 with Python bindings enabled.
- 8.2 A flaw was found in libsoup.
- 8.2 A flaw was found in FreeIPA.
- 8.1 A flaw was found in FreeIPA.
- 8.1 A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval()…
- 7.9 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and…
- 7.8 A code execution flaw was found in Emacs, affecting versions prior to 31.2.
- 7.8 A flaw was found in util-linux.
- 7.8 A flaw was found in Emacs TRAMP.
- 7.8 openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context.
- 7.8 A flaw was found in ansible-core.
- 7.6 A flaw was found in sg3utils.
- 7.5 The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit…
- 7.5 A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly.
- 7.5 A flaw was found in FreeIPA.
- 7.5 A flaw was found in FreeIPA.
- 7.5 A flaw was found in dracut.
- 7.5 A flaw was found in dracut.
- 7.5 A flaw was found in the soupmultipartnewfrommessage() function of the libsoup HTTP library, which is commonly used by GNOME and other…
- 7.5 A flaw was found in libsoup, where the soupheadersparserequest() function may be vulnerable to an out-of-bound read.
- 7.5 A flaw was found in libsoup.
- 7.4 A flaw was found in libsoup, where the soupmultipartnewfrommessage() function is vulnerable to an out-of-bounds read.
- 7.3 Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are…
- 7.3 A local privilege escalation vulnerability was found in the ansible.posix authorizedkey module.
- 7.2 A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component.
- 7.0 A flaw was found in GCC.
- 7.0 A flaw was found in libsoup.
- 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA…
- 6.8 A flaw was found in the libblkid library of util-linux.
- 6.5 A flaw was found in libkcapi.
- 5.9 A flaw was found in GLib.
- 5.5 A flaw was found in Podman.
- 5.5 Multiple unbounded alloca() calls in the PulseAudio protocol server.
- 5.1 A flaw was found in libkcapi.
- 4.8 A flaw was found in GLib, which is vulnerable to an integer overflow in the gstringinsertunichar() function.
- 4.4 A flaw was found in GNU tar.
- 3.9 A flaw was found in libarchive.
- 2.9 A signed integer overflow vulnerability was found in libarchive's ZIP writer.
- 2.5 A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Red Hat Enterprise Linux 10 is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Windows 11 version 26H1 Windows 11 Version 25H2 Windows 11 Version 24H2 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows Server 2022 Windows 10 Version 21H2 Windows Server 2019 (Server Core installation) Windows 10 Version 22H2 Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Red Hat Enterprise Linux 9 MediaTek chipset Red Hat Enterprise Linux 8 n/a Windows 11 Version 26H2 Windows 11 Version 23H2