Red Hat Enterprise Linux 7.

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Broken access control

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Memory corruption

Memory leak in btrfs_get_dev_args_from_path()

• Kernel
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: btrfs: double free in btrfs_get_root_ref()

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: jfs: null pointer dereference in dbfree()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Postgresql: merge fails to enforce update or select row security policies

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-1220

Postgresql: extension script @substitutions@ within quoting allow sql injection

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• SQL injection

Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Extended Update Support
• Memory corruption

Out-of-bounds read information disclosure vulnerability

• qemu-kvm
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: smsusb: use-after-free caused by do_submit_urb()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: cxgb4: use-after-free in ch_flower_stats_cb()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Heap buffer overflow in virtio_crypto_sym_op_helper()

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-385

Tree connection null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Session null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Qemu: 9pfs: suid/sgid bits not dropped on file write

• qemu
• Red Hat Enterprise Linux 6
• CWE-281

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-413

Session setup memory exhaustion denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Denial of service

Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• CWE-667

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
• Memory corruption

Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Memory corruption

Out-of-bounds read when setting hmac data

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Processing sftp server read may cause null dereference

• libssh
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: spotlight server-side share path disclosure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Samba: type confusion in mdssvc rpc service for spotlight

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Samba: infinite loop in mdssvc rpc service for spotlight

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Denial of service

Samba: smb2 packet signing is not enforced when "server signing = required" is set

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS
• CWE-924

Samba: out-of-bounds read in winbind auth_crap

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Possibility of deadlock in libbpf function sock_hash_delete_elem

• kernel
• Red Hat Enterprise Linux 6
• Denial of service

Segmentation fault in fax3encode in libtiff/tif_fax3.c

• libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: netlink socket crash (null pointer deref) in netlink_dump function

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: a race condition in crypto module in the function skcipher_recvmsg

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Race condition
• Denial of service

Race condition exists in the key generation and rotation functionality

• tang
• Red Hat Enterprise Linux 7
• Race condition

Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Heap-buffer-overflow in src/formats_i.c

• sox
• Red Hat Enterprise Linux 6
• Memory corruption

Heap-buffer-overflow in src/hcom.c

• sox
• Red Hat Enterprise Linux 6
• Memory corruption

Floating point exception in src/voc.c

• sox
• Red Hat Enterprise Linux 6
• CWE-1077

Floating point exception in src/aiff.c

• sox
• Red Hat Enterprise Linux 6
• CWE-1077

Tree connection race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Arbitrary file write

• libreoffice
• Red Hat Enterprise Linux 6
• CWE-20

Crash due to a null pointer dereference in the dn_nsp_send function

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Libtiff: null pointer dereference in tif_dir.c

• Libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: udmabuf: improper validation of array index leading to local privilege escalation

• Linux kernel
• Red Hat Enterprise Linux 9
• CWE-129