# CERT-FR flags Red Hat multi-product patch batch

Published: 2026-10-23 · Severity: routine
Canonical: https://vorant.io/reports/355e17aa-740d-5097-973a-d7043281cbc6/cert-fr-flags-red-hat-multi-product-patch-batch

> CERT-FR consolidates multiple Red Hat Enterprise Linux security advisories covering dozens of CVEs enabling security bypass or denial of service.

CERT-FR published a consolidated advisory referencing 20 Red Hat Security Advisories (RHSA) issued between 16 and 22 October 2026, covering a broad range of Red Hat Enterprise Linux product variants and architectures (x86_64, aarch64, ppc64le, s390x) across versions 6 through 10, including CodeReady Linux Builder, Extended Update Support, Extended Life Cycle, and SAP Solutions update channels. The bulletin aggregates over 50 CVEs affecting these products, with Red Hat's own advisories providing patch details.

The risks associated with these vulnerabilities are described generically as security policy bypass, denial of service, and unspecified impacts not detailed by the vendor. No exploitation in the wild is mentioned, and no single vulnerability is highlighted as more severe or more likely to be exploited than another. Defenders running Red Hat Enterprise Linux or related CodeReady Builder products across any supported lifecycle track should consult the referenced RHSA bulletins to identify applicable packages and apply the corresponding updates.

As this is a CERT-FR compilation of a vendor's own patch Tuesday-style release rather than original research, the brief primarily serves as a pointer to Red Hat's official errata. Organizations should prioritize patching based on their specific RHEL version and installed components, cross-referencing the CVE list against their asset inventory.

## Mentioned in this report

- Vulnerabilities: CVE-2025-38147, CVE-2025-68745, CVE-2026-31411, CVE-2026-31581, CVE-2026-31772, CVE-2026-43020, CVE-2026-43450, CVE-2026-43493, CVE-2026-46149, CVE-2026-46189, CVE-2026-52935, CVE-2026-53062, CVE-2026-53196, CVE-2026-63802, CVE-2026-63920, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63993, CVE-2026-64048, CVE-2026-64113, CVE-2026-64114, CVE-2026-64266, CVE-2026-64481, CVE-2026-64490, CVE-2026-64572, CVE-2026-68086, CVE-2026-68202, CVE-2026-68236, CVE-2026-68245, CVE-2026-68278, CVE-2026-68448, CVE-2026-68480, CVE-2026-74588, CVE-2026-74752, CVE-2026-80536, CVE-2026-80590, CVE-2026-80792, CVE-2026-80887, CVE-2026-89479

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1373

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/355e17aa-740d-5097-973a-d7043281cbc6/cert-fr-flags-red-hat-multi-product-patch-batch.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup