Red Hat Enterprise Linux 6.

Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-672

Libvirt: stack use-after-free in virnetclientioeventloop()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-562

Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-208

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Race condition

Qemu-kvm: net: assertion failure in update_sctp_checksum()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

Qemu: virtio: dma reentrancy issue leads to double free vulnerability

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Xorg-x11-server: use-after-free in procrenderaddglyphs

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Xz: malicious code in distributed source

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-506

Pcp: exposure of the redis server backend allows remote command execution via pmproxy

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Information disclosure

Libvirt: negative g_new0 length can lead to unbounded memory allocation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Gnutls: vulnerable to minerva side-channel information leak

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Weak cryptography or TLS

Gnutls: potential crash during chain building/verification

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-248

Libvirt: null pointer dereference in udevconnectlistallinterfaces()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-823

Libvirt: off-by-one error in udevlistinterfacesbystatus()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• CWE-193

Libgcrypt: vulnerable to marvin attack

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-385

Pcp: unsafe use of directories allows pcp to root privilege escalation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Race condition

Xorg-x11-server: heap buffer overflow in disabledevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Broken access control

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• Memory corruption

Kernel: stack overflow problem in open vswitch kernel module leading to dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Memory corruption

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: null pointer dereference in __nvmet_req_complete

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: null pointer dereference in nvmet_tcp_execute_request

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: null pointer dereference in nvmet_tcp_build_iovec

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Grub2: grub2-set-bootflag can be abused by local (pseudo-)users

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-459

Cpio: extraction allows symlinks which enables remote command execution

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Path traversal

Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Glibc: integer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Glibc: heap-based buffer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Information disclosure

Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: use-after-free while changing the mount option in __ext4_remount leading

• Linux kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Race condition

Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-229

Xorg-x11-server: selinux context corruption

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Xorg-x11-server: selinux unlabeled glx pbuffer

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-158

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnutls: rejects certificate chain with distributed trust

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Weak cryptography or TLS

Sqlite: use-after-free bug in jsonparseaddnodearray

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnutls: incomplete fix for cve-2023-5981

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

• Linux kernel
• Red Hat Enterprise Linux 8
• Memory corruption

Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c

• Red Hat Enterprise Linux 8.6 Extended Update Support
• Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
• Memory corruption

Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Qemu: vnc: null pointer dereference in qemu_clipboard_request()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption