Red Hat Enterprise Linux 9.

Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Memory corruption

Postgresql: role pg_signal_backend can signal certain superuser processes.

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• Denial of service

Postgresql: memory disclosure in aggregate function calls

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• CWE-686

Postgresql: buffer overrun from integer overflow in array modification

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: io_uring out of boundary memory access in __io_uaddr_map()

• kernel
• Red Hat Enterprise Linux 6
• CWE-823

Kernel: null pointer dereference vulnerability in nft_dynset_init()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: oob access in smb2_dump_detail

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: out-of-bounds read vulnerability in smbcalcsize

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Gnutls: timing side-channel in the rsa-psk authentication

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• CWE-208

Libnbd: malicious nbd server may crash libnbd

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

Libtiff: out-of-memory in tiffopen via a craft file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: nvme: memory corruption via unprivileged user passthrough

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: local dos vulnerability in scatterwalk_copychunks

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9

Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Samba: ad dc password exposure to privileged users and rodcs

• samba
• Red Hat Enterprise Linux 6
• Memory corruption

Opensc: multiple memory issues with pkcs15-init (enrollment tool)

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Opensc: potential pin bypass when card tracks its own login state

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Authentication bypass

Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-755

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Denial of service

Qemu: improper ide controller reset can lead to mbr overwrite

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-821

Samba: smbd allows client access to unix domain sockets on the file system as root

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Path traversal

Squid: denial of service in http digest authentication

• Red Hat Enterprise Linux 6 Extended Lifecycle Support
• Red Hat Enterprise Linux 7
• Memory corruption

Squid: denial of service in ftp

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Extended Update Support
• CWE-681

Samba: ad dc busy rpc multiple listener dos

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Squid: dos against http and https

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-755

Samba: smb clients can truncate files with read-only permissions

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Broken access control

Use-after-free in parse_lease_state()

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Squid: request/response smuggling in http/1.1 and icap

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• HTTP request smuggling

Potential buffer overflow in php_cli_server_startup_workers

• php
• Red Hat Enterprise Linux 6
• Memory corruption

Reachable assertion in avahi_alternative_host_name

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in avahi_rdata_parse

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in dbus_set_host_name

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in avahi_escape_label

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in avahi_dns_packet_append_record

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Heap-buffer-overflow in extractimagesection()

• libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Use-after-free in setup_async_work()

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: slab-use-after-free write in txend due to race condition

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Use-after-free in smb2_is_status_io_timeout()

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: use after free in nvmet_tcp_free_crypto in nvme

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Insights-client: unsafe handling of temporary files and directories

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-379

Xorg-x11-server: use-after-free bug in damagedestroy

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Xorg-x11-server: use-after-free bug in destroywindow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: out-of-bounds read at fs/ntfs.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Samba: heap buffer overflow with freshness tokens in the heimdal kdc

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-911

Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Tracker-miners: sandbox escape

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-693

Libxpm: out of bounds read on xpm with corrupted colormap

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libx11: integer overflow in xcreateimage() leading to a heap overflow

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libx11: stack exhaustion from infinite recursion in putsubimage()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Libx11: out-of-bounds memory access in _xkbreadkeysyms()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption