# Red Hat RHEL patches dozens of CVEs

Published: 2026-10-23 · Severity: routine
Canonical: https://vorant.io/reports/b844bce3-70d5-52dc-8037-f604c587ea43/red-hat-rhel-patches-dozens-of-cves

> CERT-FR advisory compiles multiple RHSA bulletins patching dozens of Red Hat Enterprise Linux vulnerabilities enabling security bypass or denial of service.

CERT-FR published a consolidated advisory referencing eighteen Red Hat Security Advisories (RHSA) issued between October 16 and 22, 2026, covering a broad range of Red Hat Enterprise Linux (RHEL) product lines including versions 7, 8, 9, and 10, across x86_64, aarch64, s390x, and ppc64le architectures, as well as CodeReady Linux Builder components and variants for Real Time, SAP solutions, and extended lifecycle support editions. The advisory enumerates over fifty CVE identifiers associated with the underlying fixes, though Red Hat has not specified the exact nature of each flaw beyond the general risk categories listed.

According to CERT-FR, the vulnerabilities allow an attacker to bypass security policy, cause a denial of service, or trigger an impact not specified by the vendor. No details on exploitation methods, exploit availability, or active exploitation in the wild are provided in this advisory. Defenders operating any of the listed Red Hat Enterprise Linux product variants should consult the referenced RHSA bulletins (RHSA-2026:83707 through RHSA-2026:88477) to identify applicable packages and apply the corresponding patches via standard Red Hat update channels.

Given the breadth of affected product lines, organizations running RHEL in any capacity—servers, SAP deployments, real-time systems, or mainframe/Power architectures—should treat this as a routine but wide-reaching patch cycle. No proof-of-concept code, in-the-wild exploitation, or specific attack technique is described in the source material, consistent with a standard vendor patch rollup rather than an active campaign.

## Mentioned in this report

- Vulnerabilities: CVE-2025-38147, CVE-2025-68745, CVE-2026-31411, CVE-2026-31581, CVE-2026-31772, CVE-2026-43020, CVE-2026-43450, CVE-2026-43493, CVE-2026-46149, CVE-2026-46189, CVE-2026-52935, CVE-2026-53062, CVE-2026-53196, CVE-2026-63802, CVE-2026-63920, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63993, CVE-2026-64048, CVE-2026-64113, CVE-2026-64114, CVE-2026-64266, CVE-2026-64481, CVE-2026-64490, CVE-2026-64572, CVE-2026-68086, CVE-2026-68202, CVE-2026-68236, CVE-2026-68245, CVE-2026-68278, CVE-2026-68448, CVE-2026-68480, CVE-2026-74588, CVE-2026-74752, CVE-2026-80536, CVE-2026-80590, CVE-2026-80792, CVE-2026-80887, CVE-2026-89479

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1373

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/b844bce3-70d5-52dc-8037-f604c587ea43/red-hat-rhel-patches-dozens-of-cves.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup