Red Hat Enterprise Linux 9 vulnerabilities and CVEs
Known vulnerabilities affecting Red Hat Enterprise Linux 9, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
68 vulnerabilities tracked. 1 with public exploit code.
- 9.8 A flaw was found in FreeIPA.
- 9.6 A flaw was found in FreeIPA.
- 9.0 A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition() function.
- 8.8 A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via…
- 8.8 A flaw was found in bubblewrap.
- 8.8 A flaw was found in WebKitGTK.
- 8.8 A flaw was found in WebKitGTK.
- 8.7 A privilege escalation flaw was found in FreeIPA.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.6 A flaw was found in libsoup.
- 8.5 A flaw was found in libxml2 with Python bindings enabled.
- 8.4 A flaw was found in GIMP's PSD file format plugin.
- 8.2 A flaw was found in FreeIPA.
- 8.1 A flaw was found in FreeIPA.
- 8.1 A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval()…
- 7.8 A flaw was found in GIMP.
- 7.8 A flaw was found in GIMP.
- 7.8 A flaw was found in GIMP.
- 7.8 A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader.
- 7.8 A flaw was found in GIMP.
- 7.8 A code execution flaw was found in Emacs, affecting versions prior to 31.2.
- 7.8 A flaw was found in the file-psd plugin in GIMP.
- 7.8 A flaw was found in GIMP.
- 7.8 A flaw was found in GIMP's ICO file loader.
- 7.8 A flaw was found in Emacs TRAMP.
- 7.8 openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context.
- 7.8 A flaw was found in the file-fits plugin in GIMP.
- 7.8 A flaw was found in ansible-core.
- 7.8 A flaw was found in xfig.
- 7.8 A vulnerability was found in Buildah.
- 7.6 A flaw was found in sg3utils.
- 7.5 The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit…
- 7.5 A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly.
- 7.5 A flaw was found in FreeIPA.
- 7.5 A flaw was found in FreeIPA.
- 7.5 A flaw was found in dracut.
- 7.5 A flaw was found in dracut.
- 7.5 A flaw was found in the soupmultipartnewfrommessage() function of the libsoup HTTP library, which is commonly used by GNOME and other…
- 7.5 A flaw was found in libsoup, where the soupheadersparserequest() function may be vulnerable to an out-of-bound read.
- 7.5 A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition() function is vulnerable to a NULL pointer dereference.
- 7.5 A flaw was found in libsoup.
- 7.5 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@…
- 7.4 A flaw was found in libsoup, where the soupmultipartnewfrommessage() function is vulnerable to an out-of-bounds read.
- 7.3 Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are…
- 7.3 A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP.
- 7.3 A flaw was found in GIMP's PSD parser.
- 7.3 A flaw was found in GIMP's PNM file format parser.
- 7.3 A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.
- 7.2 A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component.
- 7.1 A flaw was found in GIMP.
- 7.0 A flaw was found in libsoup.
- 7.0 A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with…
- 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA…
- 6.5 A flaw was found in libkcapi.
- 6.5 A vulnerability was found in Podman, Buildah, and CRI-O.
- 6.5 A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages.
- 5.9 A flaw was found in GLib.
Showing the 60 that warrant attention first, of 68. Search the full feed for Red Hat Enterprise Linux 9.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Red Hat Enterprise Linux 9 is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Windows 11 version 26H1 Windows 11 Version 25H2 Windows 11 Version 24H2 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 Windows Server 2012 (Server Core installation) MediaTek chipset Red Hat Enterprise Linux 8 n/a Windows 11 Version 26H2 Windows 11 Version 23H2 Red Hat Enterprise Linux 10