Advisories · Technology
Red Hat Enterprise Linux for NVIDIA 26.
Every CVE that names Red Hat Enterprise Linux for NVIDIA 26 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 8.2 High
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.8 High
Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 4.4 Medium
Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-681
- CVSS 7.8 High
Libvirt: swtpm privilege escalation via symlink following
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 5.5 Medium
Libvirt: information disclosure via world-readable storage volume images during clone/convert
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Broken access control
- CVSS 2.3 Low
Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Other injection
- CVSS 7.3 High
Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 10
- CWE-61
- CVSS 6.7 Medium
Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Memory corruption