# Red Hat Enterprise Linux 9.

Every CVE that names Red Hat Enterprise Linux 9 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Kernel: null pointer dereference in nvmet_tcp_build_iovec](https://agentprime.io/advisories/CVE-2023-6356.md)
  `CVE-2023-6356` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption
- [Grub2: grub2-set-bootflag can be abused by local (pseudo-)users](https://agentprime.io/advisories/CVE-2024-1048.md)
  `CVE-2024-1048` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-459
- [Cpio: extraction allows symlinks which enables remote command execution](https://agentprime.io/advisories/CVE-2023-7216.md)
  `CVE-2023-7216` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 5 Feb 2024 · Tags: Path traversal
- [Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation](https://agentprime.io/advisories/CVE-2023-6240.md)
  `CVE-2023-6240` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Feb 2024 · Tags: Information disclosure
- [Glibc: integer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6780.md)
  `CVE-2023-6780` · CVE record: glibc and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption
- [Glibc: off-by-one heap-based buffer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6779.md)
  `CVE-2023-6779` · CVE record: glibc and 4 more · CVSS 8.2 High · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption
- [Glibc: heap-based buffer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6246.md)
  `CVE-2023-6246` · CVE record: glibc and 4 more · CVSS 8.4 High · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption
- [Opensc: side-channel leaks while stripping encryption pkcs#1 padding](https://agentprime.io/advisories/CVE-2023-5992.md)
  `CVE-2023-5992` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 5.6 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Information disclosure
- [Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)](https://agentprime.io/advisories/CVE-2024-0914.md)
  `CVE-2024-0914` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Information disclosure
- [Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication](https://agentprime.io/advisories/CVE-2024-0564.md)
  `CVE-2024-0564` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 30 Jan 2024 · Tags: Information disclosure
- [Shim: out of bounds read when parsing mz binaries](https://agentprime.io/advisories/CVE-2023-40551.md)
  `CVE-2023-40551` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption
- [Shim: out-of-bounds read printing error messages](https://agentprime.io/advisories/CVE-2023-40546.md)
  `CVE-2023-40546` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption
- [Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file](https://agentprime.io/advisories/CVE-2023-40549.md)
  `CVE-2023-40549` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption
- [Shim: out-of-bound read in verify_buffer_sbat()](https://agentprime.io/advisories/CVE-2023-40550.md)
  `CVE-2023-40550` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption
- [Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems](https://agentprime.io/advisories/CVE-2023-40548.md)
  `CVE-2023-40548` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption
- [Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-6200.md)
  `CVE-2023-6200` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2024 · Tags: Race condition
- [Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function](https://agentprime.io/advisories/CVE-2024-0841.md)
  `CVE-2024-0841` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 28 Jan 2024 · Tags: Memory corruption
- [Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service](https://agentprime.io/advisories/CVE-2023-52356.md)
  `CVE-2023-52356` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Jan 2024 · Tags: Memory corruption
- [Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom](https://agentprime.io/advisories/CVE-2023-52355.md)
  `CVE-2023-52355` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Jan 2024 · Tags: Memory corruption
- [Shim: rce in http boot support may lead to secure boot bypass](https://agentprime.io/advisories/CVE-2023-40547.md)
  `CVE-2023-40547` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 8.3 High · Not analysed yet · Published 25 Jan 2024 · Tags: Memory corruption
- [Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()](https://agentprime.io/advisories/CVE-2023-39197.md)
  `CVE-2023-39197` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 23 Jan 2024 · Tags: Memory corruption
- [Kernel: use-after-free while changing the mount option in \_\_ext4_remount leading](https://agentprime.io/advisories/CVE-2024-0775.md)
  `CVE-2024-0775` · CVE record: Linux kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 22 Jan 2024 · Tags: Memory corruption
- [Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf](https://agentprime.io/advisories/CVE-2023-6531.md)
  `CVE-2023-6531` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 7.0 High · Not analysed yet · Published 21 Jan 2024 · Tags: Race condition
- [Kernel: nf_tables: pointer math issue in nft_byteorder_eval()](https://agentprime.io/advisories/CVE-2024-0607.md)
  `CVE-2024-0607` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-229
- [Xorg-x11-server: selinux context corruption](https://agentprime.io/advisories/CVE-2024-0409.md)
  `CVE-2024-0409` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 3 more · CVSS 7.8 High · Not analysed yet · Published 18 Jan 2024 · Tags: Memory corruption
- [Xorg-x11-server: selinux unlabeled glx pbuffer](https://agentprime.io/advisories/CVE-2024-0408.md)
  `CVE-2024-0408` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-158
- [Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer](https://agentprime.io/advisories/CVE-2023-6816.md)
  `CVE-2023-6816` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jan 2024 · Tags: Memory corruption
- [Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination](https://agentprime.io/advisories/CVE-2024-0646.md)
  `CVE-2024-0646` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 17 Jan 2024 · Tags: Memory corruption
- [Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke](https://agentprime.io/advisories/CVE-2024-0641.md)
  `CVE-2024-0641` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jan 2024 · Tags: Denial of service
- [Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos](https://agentprime.io/advisories/CVE-2024-0639.md)
  `CVE-2024-0639` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jan 2024 · Tags: Denial of service
- [Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap](https://agentprime.io/advisories/CVE-2024-0582.md)
  `CVE-2024-0582` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 16 Jan 2024 · Tags: Memory corruption
- [Gnutls: rejects certificate chain with distributed trust](https://agentprime.io/advisories/CVE-2024-0567.md)
  `CVE-2024-0567` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Weak cryptography or TLS
- [Sqlite: use-after-free bug in jsonparseaddnodearray](https://agentprime.io/advisories/CVE-2024-0232.md)
  `CVE-2024-0232` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 16 Jan 2024 · Tags: Memory corruption
- [Gnutls: incomplete fix for cve-2023-5981](https://agentprime.io/advisories/CVE-2024-0553.md)
  `CVE-2024-0553` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Information disclosure
- [Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client](https://agentprime.io/advisories/CVE-2024-0565.md)
  `CVE-2024-0565` · CVE record: Linux kernel and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2024 · Tags: Memory corruption
- [Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c](https://agentprime.io/advisories/CVE-2024-0562.md)
  `CVE-2024-0562` · CVE record: Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jan 2024 · Tags: Memory corruption
- [Grub2: bypass the grub password protection feature](https://agentprime.io/advisories/CVE-2023-4001.md)
  `CVE-2023-4001` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2024 · Tags: Authentication bypass
- [Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c](https://agentprime.io/advisories/CVE-2023-6915.md)
  `CVE-2023-6915` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 15 Jan 2024 · Tags: Memory corruption
- [Qemu: vnc: null pointer dereference in qemu_clipboard_request()](https://agentprime.io/advisories/CVE-2023-6683.md)
  `CVE-2023-6683` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption
- [Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.](https://agentprime.io/advisories/CVE-2024-0443.md)
  `CVE-2024-0443` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Jan 2024 · Tags: CWE-402
- [Ipa: invalid csrf protection](https://agentprime.io/advisories/CVE-2023-5455.md)
  `CVE-2023-5455` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: Cross-site request forgery (CSRF)
- [Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()](https://agentprime.io/advisories/CVE-2024-0340.md)
  `CVE-2024-0340` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Information disclosure
- [Kernel: aoe: improper reference count leads to use-after-free vulnerability](https://agentprime.io/advisories/CVE-2023-6270.md)
  `CVE-2023-6270` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.0 High · Not analysed yet · Published 4 Jan 2024 · Tags: Memory corruption
- [Packagekitd: use-after-free in idle function callback](https://agentprime.io/advisories/CVE-2024-0217.md)
  `CVE-2024-0217` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 3 Jan 2024 · Tags: Memory corruption
- [Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname](https://agentprime.io/advisories/CVE-2023-6004.md)
  `CVE-2023-6004` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 4.8 Medium · Not analysed yet · Published 3 Jan 2024 · Tags: Other injection
- [Kernel: refcount leak in ctnetlink_create_conntrack()](https://agentprime.io/advisories/CVE-2023-7192.md)
  `CVE-2023-7192` · CVE record: Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Denial of service
- [Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation](https://agentprime.io/advisories/CVE-2024-0193.md)
  `CVE-2024-0193` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()](https://agentprime.io/advisories/CVE-2023-6693.md)
  `CVE-2023-6693` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Perl: perl for windows binary hijacking vulnerability](https://agentprime.io/advisories/CVE-2023-47039.md)
  `CVE-2023-47039` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Shadow-utils: possible password leak during passwd(1) change](https://agentprime.io/advisories/CVE-2023-4641.md)
  `CVE-2023-4641` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Dec 2023 · Tags: Authentication bypass
- [Sudo: improper handling of ipa_hostname leads to privilege mismanagement](https://agentprime.io/advisories/CVE-2023-7090.md)
  `CVE-2023-7090` · CVE record: sudo and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 23 Dec 2023 · Tags: Privilege escalation
- [Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes](https://agentprime.io/advisories/CVE-2023-7008.md)
  `CVE-2023-7008` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 23 Dec 2023 · Tags: CWE-300
- [Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()](https://agentprime.io/advisories/CVE-2023-7042.md)
  `CVE-2023-7042` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.4 Medium · Not analysed yet · Published 21 Dec 2023 · Tags: Memory corruption
- [Kernel: gsm multiplexing race condition leads to privilege escalation](https://agentprime.io/advisories/CVE-2023-6546.md)
  `CVE-2023-6546` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 21 Dec 2023 · Tags: CWE-366
- [Libssh: missing checks for return values for digests](https://agentprime.io/advisories/CVE-2023-6918.md)
  `CVE-2023-6918` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.7 Low · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-252
- [Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c](https://agentprime.io/advisories/CVE-2023-6228.md)
  `CVE-2023-6228` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 18 Dec 2023 · Tags: Memory corruption
- [Perl: write past buffer end via illegal user-defined unicode property](https://agentprime.io/advisories/CVE-2023-47038.md)
  `CVE-2023-47038` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.0 High · Not analysed yet · Published 18 Dec 2023 · Tags: Memory corruption
- [Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty](https://agentprime.io/advisories/CVE-2023-6478.md)
  `CVE-2023-6478` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.6 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption
- [Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions](https://agentprime.io/advisories/CVE-2023-6377.md)
  `CVE-2023-6377` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption
- [Mod_cluster/mod_proxy_cluster: stored cross site scripting](https://agentprime.io/advisories/CVE-2023-6710.md)
  `CVE-2023-6710` · CVE record: Red Hat JBoss Core Services for RHEL 8 and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: Cross-site scripting (XSS)

Newest: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-9.md>
Older: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-9.md?cursor=WyIyMDIzLTEyLTEyVDIyOjAxOjM0LjM1OTAwMFoiLCJDVkUtMjAyMy02NzEwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-enterprise-linux-9&cursor=WyIyMDI0LTAyLTA3VDIxOjA0OjIxLjQwOTAwMFoiLCJDVkUtMjAyMy02NTM1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-9/?cursor=WyIyMDI0LTAyLTA3VDIxOjA0OjIxLjQwOTAwMFoiLCJDVkUtMjAyMy02NTM1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.