Red Hat Enterprise Linux 9.2 Extended Update Support.

Kernel: null pointer dereference in __nvmet_req_complete

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: null pointer dereference in nvmet_tcp_execute_request

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: null pointer dereference in nvmet_tcp_build_iovec

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Shim: out of bounds read when parsing mz binaries

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bounds read printing error messages

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bound read in verify_buffer_sbat()

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: rce in http boot support may lead to secure boot bypass

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Gnutls: rejects certificate chain with distributed trust

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Weak cryptography or TLS

Gnutls: incomplete fix for cve-2023-5981

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

• Linux kernel
• Red Hat Enterprise Linux 8
• Memory corruption

Grub2: bypass the grub password protection feature

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Extended Update Support
• Authentication bypass

Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-402

Ipa: invalid csrf protection

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Cross-site request forgery (CSRF)

Kernel: refcount leak in ctnetlink_create_conntrack()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Denial of service

Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• Memory corruption

Kernel: gsm multiplexing race condition leads to privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-366

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Memory corruption

Postgresql: role pg_signal_backend can signal certain superuser processes.

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• Denial of service

Postgresql: memory disclosure in aggregate function calls

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• CWE-686

Postgresql: buffer overrun from integer overflow in array modification

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: oob access in smb2_dump_detail

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: out-of-bounds read vulnerability in smbcalcsize

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Gnutls: timing side-channel in the rsa-psk authentication

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• CWE-208

Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-755

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Denial of service

Samba: smbd allows client access to unix domain sockets on the file system as root

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Path traversal

Squid: dos against http and https

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-755

Samba: smb clients can truncate files with read-only permissions

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Broken access control

Kernel: use after free in nvmet_tcp_free_crypto in nvme

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-911

Tracker-miners: sandbox escape

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-693

Kernel: ebpf: insufficient stack type checks in dynptr

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-20

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Memory corruption

Postgresql: merge fails to enforce update or select row security policies

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-1220

Postgresql: extension script @substitutions@ within quoting allow sql injection

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• SQL injection

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-413

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
• Memory corruption

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Memory corruption

Samba: infinite loop in mdssvc rpc service for spotlight

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Denial of service