Advisories · Technology

Red Hat Virtualization 4 for Red Hat Enterprise Linux 8.

Every CVE that names Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-3758 CVE record

CVSS 7.1 High

Sssd: race condition during authorization leads to gpo policies functioning inconsistently
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Race condition
Not analysed yet 18 Apr 2024
CVE-2023-6536 CVE record

CVSS 6.5 Medium

Kernel: null pointer dereference in __nvmet_req_complete
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 7 Feb 2024
CVE-2023-6535 CVE record

CVSS 6.5 Medium

Kernel: null pointer dereference in nvmet_tcp_execute_request
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 7 Feb 2024
CVE-2023-6356 CVE record

CVSS 6.5 Medium

Kernel: null pointer dereference in nvmet_tcp_build_iovec
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 7 Feb 2024
CVE-2024-0646 CVE record

CVSS 7.0 High

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Memory corruption
Not analysed yet 17 Jan 2024
CVE-2024-0565 CVE record

CVSS 6.8 Medium

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client
- Linux kernel
- Red Hat Enterprise Linux 8
- Memory corruption
Not analysed yet 15 Jan 2024
CVE-2024-0562 CVE record

CVSS 7.8 High

Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
- Memory corruption
Not analysed yet 15 Jan 2024
CVE-2023-7192 CVE record

CVSS 5.5 Medium

Kernel: refcount leak in ctnetlink_create_conntrack()
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Red Hat Enterprise Linux 8.2 Telecommunications Update Service
- Denial of service
Not analysed yet 2 Jan 2024
CVE-2023-6546 CVE record

CVSS 7.0 High

Kernel: gsm multiplexing race condition leads to privilege escalation
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- CWE-366
Not analysed yet 21 Dec 2023
CVE-2023-6610 CVE record

CVSS 7.1 High

Kernel: oob access in smb2_dump_detail
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 8 Dec 2023
CVE-2023-6606 CVE record

CVSS 7.1 High

Kernel: out-of-bounds read vulnerability in smbcalcsize
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 8 Dec 2023
CVE-2023-42669 CVE record

CVSS 6.5 Medium

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Denial of service
Not analysed yet 6 Nov 2023
CVE-2023-3961 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Samba: smbd allows client access to unix domain sockets on the file system as root
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Path traversal
Not analysed yet 3 Nov 2023
CVE-2023-4091 CVE record

CVSS 6.5 Medium

Samba: smb clients can truncate files with read-only permissions
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Broken access control
Not analysed yet 3 Nov 2023
CVE-2023-5178 CVE record

CVSS 8.8 High

Kernel: use after free in nvmet_tcp_free_crypto in nvme
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Memory corruption
Not analysed yet 1 Nov 2023
CVE-2023-4911 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Glibc: buffer overflow in ld.so leading to privilege escalation
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-4732 CVE record

CVSS 4.7 Medium

Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- CWE-366
Not analysed yet 3 Oct 2023
CVE-2023-42753 CVE record

CVSS 7.0 High

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 7.7 Advanced Update Support
- Memory corruption
Not analysed yet 25 Sept 2023
CVE-2023-4806 CVE record

CVSS 5.9 Medium

Glibc: potential use-after-free in getaddrinfo()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 18 Sept 2023
CVE-2023-4813 CVE record

CVSS 5.9 Medium

Glibc: potential use-after-free in gaih_inet()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-4459 CVE record

CVSS 5.5 Medium

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Red Hat Enterprise Linux 8.2 Telecommunications Update Service
- Memory corruption
Not analysed yet 21 Aug 2023
CVE-2023-4132 CVE record

CVSS 5.5 Medium

Kernel: smsusb: use-after-free caused by do_submit_urb()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 3 Aug 2023
CVE-2023-4004 CVE record

CVSS 7.8 High

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Memory corruption
Not analysed yet 31 Jul 2023
CVE-2023-3772 CVE record

CVSS 5.5 Medium

Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 25 Jul 2023
CVE-2023-3812 CVE record

CVSS 7.8 High

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
- Memory corruption
Not analysed yet 24 Jul 2023
CVE-2023-3567 CVE record

CVSS 7.1 High

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 24 Jul 2023
CVE-2023-34968 CVE record

CVSS 5.3 Medium

Samba: spotlight server-side share path disclosure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Information disclosure
Not analysed yet 20 Jul 2023
CVE-2023-34967 CVE record

CVSS 5.3 Medium

Samba: type confusion in mdssvc rpc service for spotlight
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 20 Jul 2023
CVE-2023-34966 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Samba: infinite loop in mdssvc rpc service for spotlight
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Denial of service
Not analysed yet 20 Jul 2023
CVE-2022-2127 CVE record

CVSS 5.9 Medium

Samba: out-of-bounds read in winbind auth_crap
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 20 Jul 2023
CVE-2023-1989 CVE record

CVSS 7.0 High

Kernel: use after free bug in btsdio_remove due to race condition
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 11 Apr 2023