Advisories · Technology
Red Hat RHOL-5.8-RHEL-9.
Every CVE that names Red Hat RHOL-5.8-RHEL-9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Kernel: null pointer dereference in __nvmet_req_complete
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Kernel: null pointer dereference in nvmet_tcp_execute_request
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Kernel: null pointer dereference in nvmet_tcp_build_iovec
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 7.0 High
Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Memory corruption
- CVSS 7.5 High
Gnutls: rejects certificate chain with distributed trust
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.2 Extended Update Support
- Weak cryptography or TLS
- CVSS 7.5 High
Gnutls: incomplete fix for cve-2023-5981
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Information disclosure
- CVSS 7.8 High
Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- Memory corruption
- CVSS 7.1 High
Kernel: oob access in smb2_dump_detail
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 7.1 High
Kernel: out-of-bounds read vulnerability in smbcalcsize
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 5.9 Medium
Gnutls: timing side-channel in the rsa-psk authentication
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- CWE-208