Red Hat Enterprise Linux 9.

Kernel: null pointer dereference in nvmet_tcp_build_iovec

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Grub2: grub2-set-bootflag can be abused by local (pseudo-)users

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-459

Cpio: extraction allows symlinks which enables remote command execution

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Path traversal

Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Glibc: integer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Glibc: heap-based buffer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Information disclosure

Shim: out of bounds read when parsing mz binaries

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bounds read printing error messages

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bound read in verify_buffer_sbat()

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Shim: rce in http boot support may lead to secure boot bypass

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: use-after-free while changing the mount option in __ext4_remount leading

• Linux kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Race condition

Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-229

Xorg-x11-server: selinux context corruption

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Xorg-x11-server: selinux unlabeled glx pbuffer

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-158

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnutls: rejects certificate chain with distributed trust

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Weak cryptography or TLS

Sqlite: use-after-free bug in jsonparseaddnodearray

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnutls: incomplete fix for cve-2023-5981

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

• Linux kernel
• Red Hat Enterprise Linux 8
• Memory corruption

Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c

• Red Hat Enterprise Linux 8.6 Extended Update Support
• Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
• Memory corruption

Grub2: bypass the grub password protection feature

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Extended Update Support
• Authentication bypass

Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Qemu: vnc: null pointer dereference in qemu_clipboard_request()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-402

Ipa: invalid csrf protection

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Cross-site request forgery (CSRF)

Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Kernel: aoe: improper reference count leads to use-after-free vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Packagekitd: use-after-free in idle function callback

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Other injection

Kernel: refcount leak in ctnetlink_create_conntrack()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Denial of service

Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• Memory corruption

Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Perl: perl for windows binary hijacking vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Shadow-utils: possible password leak during passwd(1) change

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Authentication bypass

Sudo: improper handling of ipa_hostname leads to privilege mismanagement

• sudo
• Red Hat Enterprise Linux 6
• Privilege escalation

Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-300

Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: gsm multiplexing race condition leads to privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-366

Libssh: missing checks for return values for digests

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-252

Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Perl: write past buffer end via illegal user-defined unicode property

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Mod_cluster/mod_proxy_cluster: stored cross site scripting

• Red Hat JBoss Core Services for RHEL 8
• Red Hat JBoss Core Services on RHEL 7
• Cross-site scripting (XSS)