目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Red Hat 厂商漏洞列表 / CVE 中文分析 1552

Red Hat 厂商相关 1552 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Red Hat 主要提供企业级 Linux 操作系统及中间件解决方案，其开源生态广泛支撑全球关键业务。历史漏洞多集中于远程代码执行、权限提升及信息泄露，部分源于底层组件集成缺陷。值得关注的是，其通过 Red Hat Security Response 团队提供长期安全支持，并集成 SELinux 强制访问控制机制以增强系统隔离性。尽管漏洞数量较多，但官方响应迅速，持续推动补丁更新以保障企业环境稳定性。

Top products by Red Hat: Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat build of Keycloak 26.4 Red Hat Hardened Images Red Hat Build of Keycloak Red Hat Enterprise Linux 6 Red Hat Ansible Automation Platform 2.5 for RHEL 8 Red Hat Enterprise Linux 9 Ansible Red Hat Advanced Cluster Management for Kubernetes 2.11 Red Hat build of Keycloak 26.6 Red Hat Ansible Automation Platform 2 keycloak Red Hat Satellite 6.16 for RHEL 8 Red Hat Directory Server 11 Red Hat OpenShift AI 2.25 Red Hat Enterprise Linux 7 Red Hat OpenShift Container Platform 4 Red Hat Quay 3 Red Hat build of Keycloak 26.2 Red Hat Satellite 6 glusterfs Red Hat JBoss Enterprise Application Platform 7.4.25 Red Hat Directory Server 11.5 E4S for RHEL 8 kernel Red Hat build of Apache Camel for Spring Boot 4 Red Hat Ansible Automation Platform 2.4 for RHEL 8 Red Hat build of Quarkus 3.27.5.SP2 multicluster engine for Kubernetes 2.10 Red Hat OpenShift Update Service
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-86565 Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write — Fast Datapath for RHEL 10 CWE-787 8.2 High 2026-10-14
CVE-2026-86563 Dpdk: dpdk: double offset bug in vhost log mapping calculation — Fast Datapath for RHEL 10 CWE-131 7.8 High 2026-10-14
CVE-2026-86562 Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) — Fast Datapath for RHEL 10 CWE-362 7.8 High 2026-10-14
CVE-2026-86561 Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup — Fast Datapath for RHEL 10 CWE-770 6.5 Medium 2026-10-14
CVE-2026-93683 Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou — Fast Datapath for RHEL 10 CWE-367 6.4 Medium 2026-10-14
CVE-2026-109968 Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file — Red Hat Enterprise Linux 10 CWE-532 5.5 Medium 2026-10-14
CVE-2026-104795 Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution — Red Hat OpenShift Container Platform 4 CWE-250 8.8 High 2026-10-14
CVE-2026-100229 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check — Red Hat Enterprise Linux 10 CWE-787 6.5 Medium 2026-10-14
CVE-2026-88842 Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption — Red Hat Hardened Images CWE-125 3.3 Low 2026-10-14
CVE-2026-109971 Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool — Red Hat Enterprise Linux 10 CWE-214 4.7 Medium 2026-10-14
CVE-2026-109970 Clevis: clevis: pkcs#11 token pin written to world-readable file — Red Hat Enterprise Linux 10 CWE-538 4.7 Medium 2026-10-14
CVE-2026-109969 Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask — Red Hat Enterprise Linux 10 CWE-306 4.7 Medium 2026-10-14
CVE-2026-100231 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters — Red Hat Enterprise Linux 10 CWE-787 6.1 Medium 2026-10-14
CVE-2026-88829 Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy — Red Hat Hardened Images CWE-444 7.2 High 2026-10-14
CVE-2026-90954 Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush — Red Hat Hardened Images CWE-59 7.8 High 2026-10-14
CVE-2026-86476 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize — Red Hat Enterprise Linux 10 CWE-787 8.4 High 2026-10-14
CVE-2026-110036 device-mapper-persistent-data 拒绝服务漏洞 — Red Hat Enterprise Linux 10 CWE-190 3.3 Low 2026-10-13
CVE-2026-88834 BusyBox httpd用户存在性验证漏洞 — Red Hat Hardened Images CWE-203 3.7 Low 2026-10-13
CVE-2026-88838 BusyBox非特权挂载选项过滤绕过可清除fstab安全限制 — Red Hat Hardened Images CWE-693 5.5 Medium 2026-10-13
CVE-2026-88833 BusyBox udhcpc DHCP包长度计算整数下溢导致拒绝服务漏洞 — Red Hat Hardened Images CWE-191 6.5 Medium 2026-10-13
CVE-2026-105460 Bluez btmon 返回值链接键事件栈上越界读取漏洞 — Red Hat Enterprise Linux 10 CWE-125 5.5 Medium 2026-10-13
CVE-2026-109976 Clevis pkcs#11数据套接字处理程序整数下溢崩溃漏洞 — Red Hat Enterprise Linux 10 CWE-787 4.7 Medium 2026-10-13
CVE-2026-109833 GNOME远程桌面堆缓冲区溢出远程拒绝服务漏洞 — Red Hat Enterprise Linux 10 CWE-121 5.9 Medium 2026-10-13
CVE-2026-109832 Gnome-remote-desktop 的 VNC TLS 处理忙等待拒绝服务漏洞 — Red Hat Enterprise Linux 10 CWE-835 7.5 High 2026-10-13
CVE-2026-109854 M17n-lib iso-2022 文本 UTF-8 解码栈未初始化读漏洞 — Red Hat Enterprise Linux 10 CWE-457 2.5 Low 2026-10-13
CVE-2026-83535 Openstack-network-exporter 基本认证明文密码存储及非恒定时间比较漏洞 — Red Hat OpenStack Platform 18.0 CWE-208 7.4 High 2026-10-12
CVE-2026-83536 Openstack-network-exporter HTTP服务慢速攻击漏洞 — Red Hat OpenStack Platform 18.0 CWE-400 5.3 Medium 2026-10-12
CVE-2026-85471 Quay 回调通知SSRF绕过漏洞 — mirror registry for Red Hat OpenShift CWE-918 6.4 Medium 2026-10-12
CVE-2026-87744 Quarkus Hibernate ORM REST Data Panache 缺失授权漏洞 — Exploit Intelligence CWE-425 9.1 Critical 2026-10-12
CVE-2026-75888 Openshift Console 通过 Helm 图表 URL 获取的认证 SSRF 漏洞 — Red Hat OpenShift Container Platform 4 CWE-918 7.7 High 2026-10-12

本页汇总了 Red Hat 厂商截至目前公开的全部 1552 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。