Red Hat Enterprise Linux For NVIDIA 26 vulnerabilities

11 CVEs affecting Red Hat Enterprise Linux For NVIDIA 26, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-93834, published 2026-09-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-10263, published 2026-06-09. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C,…
CVE-2026-6426, published 2026-08-10. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64_t but read by the VMS_VBUFFER load path as a signed…
CVE-2026-93834, published 2026-09-25. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a…
CVE-2025-54518, published 2026-05-15. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially…
CVE-2026-81627, published 2026-09-18. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine…
CVE-2026-18917, published 2026-08-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check,…
CVE-2026-12080, published 2026-07-20. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can…
CVE-2026-61477, published 2026-08-07. Low severity, CVSS 2.3. EPSS: 0.2% chance of exploitation in the next 30 days. An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target…
CVE-2026-48914, published 2026-06-12. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges…
CVE-2026-63622, published 2026-08-10. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By…

Latest

CVE-2026-63623, published 2026-08-10. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with…