# Red Hat Enterprise Linux 8.

Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation](https://agentprime.io/advisories/CVE-2026-87853.md)
  `CVE-2026-87853` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-187
- [Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup](https://agentprime.io/advisories/CVE-2026-87766.md)
  `CVE-2026-87766` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Path traversal
- [Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler](https://agentprime.io/advisories/CVE-2026-86564.md)
  `CVE-2026-86564` · CVE record: Red Hat Fast Datapath for RHEL 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block](https://agentprime.io/advisories/CVE-2026-18090.md)
  `CVE-2026-18090` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Libxml2: double-free/uaf in libxml2 python bindings](https://agentprime.io/advisories/CVE-2026-74860.md)
  `CVE-2026-74860` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Gnome-tweaks: path traversal in theme installer](https://agentprime.io/advisories/CVE-2026-74859.md)
  `CVE-2026-74859` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal
- [Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)](https://agentprime.io/advisories/CVE-2026-76561.md)
  `CVE-2026-76561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Glib2: toctou symlink race in \`g_file_create_replace_destination\` fallback path](https://agentprime.io/advisories/CVE-2026-86469.md)
  `CVE-2026-86469` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Path traversal
- [389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor](https://agentprime.io/advisories/CVE-2026-19843.md)
  `CVE-2026-19843` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 8.4 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection
- [389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property](https://agentprime.io/advisories/CVE-2026-18922.md)
  `CVE-2026-18922` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Authentication bypass
- [389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search](https://agentprime.io/advisories/CVE-2026-18453.md)
  `CVE-2026-18453` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption
- [389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()](https://agentprime.io/advisories/CVE-2026-18355.md)
  `CVE-2026-18355` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption
- [389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn](https://agentprime.io/advisories/CVE-2026-76560.md)
  `CVE-2026-76560` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Broken access control
- [Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service](https://agentprime.io/advisories/CVE-2026-79678.md)
  `CVE-2026-79678` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Sept 2026 · Tags: Code injection
- [Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci](https://agentprime.io/advisories/CVE-2026-76578.md)
  `CVE-2026-76578` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Authentication bypass
- [Flatpak: flatpak: toctou race condition allows symlink redirection](https://agentprime.io/advisories/CVE-2026-76925.md)
  `CVE-2026-76925` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Race condition
- [Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize](https://agentprime.io/advisories/CVE-2026-85769.md)
  `CVE-2026-85769` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read](https://agentprime.io/advisories/CVE-2026-85534.md)
  `CVE-2026-85534` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service
- [Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems](https://agentprime.io/advisories/CVE-2026-81666.md)
  `CVE-2026-81666` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly](https://agentprime.io/advisories/CVE-2026-81665.md)
  `CVE-2026-81665` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload](https://agentprime.io/advisories/CVE-2026-85197.md)
  `CVE-2026-85197` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification](https://agentprime.io/advisories/CVE-2026-84185.md)
  `CVE-2026-84185` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS
- [Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk](https://agentprime.io/advisories/CVE-2026-71224.md)
  `CVE-2026-71224` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Denial of service
- [Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing](https://agentprime.io/advisories/CVE-2026-71222.md)
  `CVE-2026-71222` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta](https://agentprime.io/advisories/CVE-2026-71221.md)
  `CVE-2026-71221` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 7.0 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit](https://agentprime.io/advisories/CVE-2026-71220.md)
  `CVE-2026-71220` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 7.0 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Gfs2-utils: gfs2-utils: stack overflow via alloca(1<\<di_depth) in hash table traversal](https://agentprime.io/advisories/CVE-2026-71219.md)
  `CVE-2026-71219` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Denial of service
- [Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header](https://agentprime.io/advisories/CVE-2026-85150.md)
  `CVE-2026-85150` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()](https://agentprime.io/advisories/CVE-2026-84838.md)
  `CVE-2026-84838` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Rpm: command injection in \`rpmbuild -t\*\` (\`gettarspec\`) via unescaped tarball path](https://agentprime.io/advisories/CVE-2026-84837.md)
  `CVE-2026-84837` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks](https://agentprime.io/advisories/CVE-2026-78409.md)
  `CVE-2026-78409` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 2 Sept 2026 · Tags: Path traversal
- [Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection](https://agentprime.io/advisories/CVE-2026-78410.md)
  `CVE-2026-78410` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Race condition
- [Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority](https://agentprime.io/advisories/CVE-2026-78408.md)
  `CVE-2026-78408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.9 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-775
- [Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html](https://agentprime.io/advisories/CVE-2026-53683.md)
  `CVE-2026-53683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Open redirect
- [Gvfs: mtp: out-of-bounds read in do_read()](https://agentprime.io/advisories/CVE-2026-84270.md)
  `CVE-2026-84270` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Gvfs: afp: heap-based buffer overflow in dsi read path](https://agentprime.io/advisories/CVE-2026-84269.md)
  `CVE-2026-84269` · CVE record: GNOME gvfs and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Gvfs: sftp: uninitialized heap disclosure in read_string()](https://agentprime.io/advisories/CVE-2026-84267.md)
  `CVE-2026-84267` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Gvfs: sftp: heap-based buffer overflow in read_reply()](https://agentprime.io/advisories/CVE-2026-84268.md)
  `CVE-2026-84268` · CVE record: GNOME gvfs and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Rpm: command execution via macro expansion in \`rpmuncompress -x\` for crafted \`.gem\` filenames](https://agentprime.io/advisories/CVE-2026-84233.md)
  `CVE-2026-84233` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts](https://agentprime.io/advisories/CVE-2026-53682.md)
  `CVE-2026-53682` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure, Broken access control
- [Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure](https://agentprime.io/advisories/CVE-2026-11873.md)
  `CVE-2026-11873` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure
- [Popt-devel: popt-static: short realloc in poptconfigfiletostring](https://agentprime.io/advisories/CVE-2026-18743.md)
  `CVE-2026-18743` · CVE record: rpm-software-management popt and 4 more · CVSS 2.5 Low · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature](https://agentprime.io/advisories/CVE-2026-83596.md)
  `CVE-2026-83596` · CVE record: WebKit WebKit and 4 more · CVSS 8.8 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption
- [Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf](https://agentprime.io/advisories/CVE-2026-13732.md)
  `CVE-2026-13732` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption
- [Resteasy-core: resteasy sourceprovider remote unauthenticated file read](https://agentprime.io/advisories/CVE-2026-17615.md)
  `CVE-2026-17615` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2026 · Tags: XML external entities (XXE)
- [Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite](https://agentprime.io/advisories/CVE-2026-81624.md)
  `CVE-2026-81624` · CVE record: Red Hat Red Hat build of Apache Camel for Spring Boot 4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2026 · Tags: Denial of service
- [Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling](https://agentprime.io/advisories/CVE-2026-82343.md)
  `CVE-2026-82343` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check](https://agentprime.io/advisories/CVE-2026-82330.md)
  `CVE-2026-82330` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count](https://agentprime.io/advisories/CVE-2026-82328.md)
  `CVE-2026-82328` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data](https://agentprime.io/advisories/CVE-2026-82327.md)
  `CVE-2026-82327` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-129
- [Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0](https://agentprime.io/advisories/CVE-2026-82324.md)
  `CVE-2026-82324` · CVE record: GNOME GIMP and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery](https://agentprime.io/advisories/CVE-2026-81893.md)
  `CVE-2026-81893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Undertow-core: undertow: denial of service via websocket permessage-deflate processing](https://agentprime.io/advisories/CVE-2026-5680.md)
  `CVE-2026-5680` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 8.1.8.GA and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Denial of service
- [Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function](https://agentprime.io/advisories/CVE-2026-78002.md)
  `CVE-2026-78002` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Gimp: stack vla size underflow denial of service in seattle](https://agentprime.io/advisories/CVE-2026-79902.md)
  `CVE-2026-79902` · CVE record: GNOME GIMP and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption
- [Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root](https://agentprime.io/advisories/CVE-2026-80185.md)
  `CVE-2026-80185` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Bluez: stack overflow in name2utf8 causes dos and potential code execution](https://agentprime.io/advisories/CVE-2026-80186.md)
  `CVE-2026-80186` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation](https://agentprime.io/advisories/CVE-2026-80101.md)
  `CVE-2026-80101` · CVE record: GNOME GIMP and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Emacs: emacs: command injection via crafted filenames in tramp](https://agentprime.io/advisories/CVE-2026-79992.md)
  `CVE-2026-79992` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Command injection
- [Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write](https://agentprime.io/advisories/CVE-2026-79655.md)
  `CVE-2026-79655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-8.md>
Older: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-8.md?cursor=WyIyMDI2LTA4LTI1VDEzOjQ5OjM3LjU5MzAwMFoiLCJDVkUtMjAyNi03OTY1NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-enterprise-linux-8&cursor=WyIyMDI2LTA5LTA5VDE2OjA2OjI3LjM3MTAwMFoiLCJDVkUtMjAyNi04Nzg3NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-8/?cursor=WyIyMDI2LTA5LTA5VDE2OjA2OjI3LjM3MTAwMFoiLCJDVkUtMjAyNi04Nzg3NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.