Red Hat Enterprise Linux 8.

Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Race condition

Libnbd: crash or misbehaviour when nbd server returns an unexpected block size

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 8
• CWE-241

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Denial of service

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Memory corruption

Heap out of bound read in builtin.c

• gawk
• Red Hat Enterprise Linux 6
• Memory corruption

Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c

• kernel
• Red Hat Enterprise Linux 6
• CWE-684

Glibc: dos due to memory leak in getaddrinfo.c

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Glibc: potential use-after-free in getaddrinfo()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Out of bounds read in parse_module function in bfd/vms-alpha.c

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Field `file_table` of `struct module *module` is uninitialized

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

G_variant_byteswap() can take a long time with some non-normal inputs

• glib2
• Red Hat Enterprise Linux 6
• Denial of service

Gvariant offset table entry size is not checked in is_normal()

• glib2
• Red Hat Enterprise Linux 6
• Denial of service

Gvariant deserialisation does not match spec for non-normal data

• glib2
• Red Hat Enterprise Linux 6
• Denial of service

Dma reentrancy issue (incomplete fix for cve-2021-3750)

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Sev-es / sev-snp vmgexit double fetch vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Triggerable assertion due to race condition in hot-unplug

• qemu
• Red Hat Enterprise Linux 6
• Denial of service

Glibc: potential use-after-free in gaih_inet()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Use after free race between mbind() and vma-locked page fault

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c

• Kernel
• Red Hat Enterprise Linux 6
• CWE-402

Ghostscript: incomplete fix for cve-2020-16305

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Broken access control

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Memory corruption

Memory leak in btrfs_get_dev_args_from_path()

• Kernel
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: btrfs: double free in btrfs_get_root_ref()

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: jfs: null pointer dereference in dbfree()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Postgresql: merge fails to enforce update or select row security policies

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-1220

Postgresql: extension script @substitutions@ within quoting allow sql injection

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• SQL injection

Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Extended Update Support
• Memory corruption

Out-of-bounds read information disclosure vulnerability

• qemu-kvm
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: smsusb: use-after-free caused by do_submit_urb()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: cxgb4: use-after-free in ch_flower_stats_cb()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Heap buffer overflow in virtio_crypto_sym_op_helper()

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-385

Tree connection null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Session null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Qemu: 9pfs: suid/sgid bits not dropped on file write

• qemu
• Red Hat Enterprise Linux 6
• CWE-281

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-413

Session setup memory exhaustion denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Denial of service

Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• CWE-667

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
• Memory corruption

Inifinite loop in babld message parsing may cause dos

• frr
• Red Hat Enterprise Linux 8
• Denial of service

Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Memory corruption

Out-of-bounds read when setting hmac data

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption