How many Red Hat Red Hat Enterprise Linux 9 CVEs are in CISA KEV?

Yes — 5 of Red Hat Red Hat Enterprise Linux 9's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Red Hat Red Hat Enterprise Linux 9 vulnerabilities?

Yes — 199 of Red Hat Red Hat Enterprise Linux 9's CVEs have a known public exploit.

Which versions of Red Hat Red Hat Enterprise Linux 9 are affected?

581 distinct Red Hat Red Hat Enterprise Linux 9 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Red Hat Red Hat Enterprise Linux 9 CVEs?

Red Hat Red Hat Enterprise Linux 9's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-122 (Heap-based Buffer Overflow).

How many critical Red Hat Red Hat Enterprise Linux 9 vulnerabilities are there?

Red Hat Red Hat Enterprise Linux 9 has 166 critical and 829 high-severity CVEs.

What is the average severity of Red Hat Red Hat Enterprise Linux 9 CVEs?

The average CVSS base score across Red Hat Red Hat Enterprise Linux 9's scored CVEs is 7.2.

Red Hat Enterprise Linux 9 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Red Hat Enterprise Linux 9 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Red Hat Enterprise Linux 9 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Red Hat Enterprise Linux 9 has 1,564 published CVE records since 2010, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 199 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Red Hat Enterprise Linux 9, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Red Hat Enterprise Linux 9's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical166

High829

Medium513

Low56

In CISA’s Known Exploited Vulnerabilities catalog

5 of Red Hat Enterprise Linux 9's CVEs are confirmed exploited in the wild.

Public exploits

199

199 of Red Hat Enterprise Linux 9's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Red Hat Enterprise Linux 9 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 0:140.8.0-1.el9_725 CVEs
>= 0:140.8.0-2.el9_725 CVEs
>= 0:140.9.0-1.el9_720 CVEs
>= 0:5.14.0-427.13.1.el9_416 CVEs
>= 0:140.10.1-1.el9_815 CVEs
>= 0:2.52.4-1.el9_813 CVEs
>= 0:3.8.10-4.el9_813 CVEs
>= 0:140.12.0-1.el9_812 CVEs
>= 0:2.52.3-0.el9_7.112 CVEs
>= 0:2.52.3-1.el9_812 CVEs
>= 0:140.10.0-1.el9_711 CVEs

Common weakness types

The CWE weakness categories most often found in Red Hat Enterprise Linux 9 CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Red Hat Enterprise Linux 9 CVEs were published each year.

2010

2022

2023

168

2024

165

2025

202

2026

1,026

Other Red Hat products

Browse vulnerabilities for other products by Red Hat.

enterprise linux2,265 CVEs enterprise linux desktop1,947 CVEs enterprise linux server1,914 CVEs enterprise linux workstation1,850 CVEs Red Hat Enterprise Linux 81,544 CVEs Red Hat Enterprise Linux 71,183 CVEs Red Hat Enterprise Linux 101,172 CVEs

Frequently asked questions

Common questions about Red Hat Enterprise Linux 9 vulnerabilities.

How many CVEs does Red Hat Red Hat Enterprise Linux 9 have?: Red Hat Red Hat Enterprise Linux 9 has 1,564 published CVE records since 2010.
How many Red Hat Red Hat Enterprise Linux 9 CVEs are in CISA KEV?: Yes — 5 of Red Hat Red Hat Enterprise Linux 9's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Red Hat Red Hat Enterprise Linux 9 vulnerabilities?: Yes — 199 of Red Hat Red Hat Enterprise Linux 9's CVEs have a known public exploit.
Which versions of Red Hat Red Hat Enterprise Linux 9 are affected?: 581 distinct Red Hat Red Hat Enterprise Linux 9 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Red Hat Red Hat Enterprise Linux 9 CVEs?: Red Hat Red Hat Enterprise Linux 9's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-122 (Heap-based Buffer Overflow).
How many critical Red Hat Red Hat Enterprise Linux 9 vulnerabilities are there?: Red Hat Red Hat Enterprise Linux 9 has 166 critical and 829 high-severity CVEs.
What is the average severity of Red Hat Red Hat Enterprise Linux 9 CVEs?: The average CVSS base score across Red Hat Red Hat Enterprise Linux 9's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Red Hat Enterprise Linux 9 vulnerabilities

Monitor new Red Hat Enterprise Linux 9 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing