Red Hat Enterprise Linux For Els vulnerabilities

5 CVEs affecting Red Hat Enterprise Linux For Els, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-59849, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-42009, published 2026-05-18. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS…
CVE-2024-0193, published 2024-01-02. Medium severity, CVSS 6.7. EPSS: 0.8% chance of exploitation in the next 30 days. A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This…
CVE-2026-59842, published 2026-07-21. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an…
CVE-2026-59849, published 2026-07-21. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly…
CVE-2026-15370, published 2026-07-21. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list…