Advisories · Technology
Red Hat Enterprise Linux 8.6 Extended Update Support.
Every CVE that names Red Hat Enterprise Linux 8.6 Extended Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
- Memory corruption
- CVSS 6.0 Medium
Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 7.1 High
Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 5.3 Medium
Samba: spotlight server-side share path disclosure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Information disclosure
- CVSS 5.3 Medium
Samba: type confusion in mdssvc rpc service for spotlight
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Samba: infinite loop in mdssvc rpc service for spotlight
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Denial of service
- CVSS 5.9 Medium
Samba: out-of-bounds read in winbind auth_crap
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 7.0 High
Kernel: use after free bug in btsdio_remove due to race condition
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption