Redhat Enterprise Linux Tus vulnerabilities

• linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 more net: skbuff: preserve shared-frag marker during coalescing CVE-2026-46300 In KEVPublic exploitFix available EPSS 16.1% 7.8 HighMay 14, 2026
• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 more jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVE-2026-39979 Fix available 6.9 MediumApril 13, 2026
• apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 more Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor CVE-2026-34486 In KEVPublic exploitFix available EPSS 98.5% 7.5 HighApril 9, 2026
• gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 more Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image CVE-2026-5201 Public exploitFix available 7.5 HighMarch 31, 2026
• x.org x server, debian linux, ibm aix +25 more +27 more Xorg: xmayland: value overflow in xkbsetcompatmap() CVE-2025-62231 Fix available 7.3 HighOctober 28, 2025
• x.org x server, xwayland, debian linux +25 more +27 more Xorg: xwayland: use-after-free in xkb client resource removal CVE-2025-62230 Fix available 7.3 HighOctober 28, 2025
• apple ipados, macos, safari +30 more +32 more The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,... CVE-2025-31277 In KEVPublic exploitFix available 8.8 HighJuly 29, 2025
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +16 more +18 more Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force CVE-2024-3183 Public exploitFix available 8.1 HighJune 10, 2024
• fedoraproject fedora, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +20 more +22 more Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access CVE-2024-0229 Fix available 7.8 HighJanuary 16, 2024
• gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 more Glibc: potential use-after-free in getaddrinfo() CVE-2023-4806 Fix available 5.9 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 more Glibc: stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-4527 Fix available 6.5 MediumSeptember 18, 2023
• samba, debian linux, redhat enterprise linux +4 more +6 more A flaw was found in the way Samba handled file/directory metadata. This flaw allows an... CVE-2021-20316 Fix available 6.8 MediumFebruary 8, 2022
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• c-ares, fedoraproject fedora, nodejs node.js +14 more +16 more A flaw was found in c-ares library, where a missing input validation check of host names returned... CVE-2021-3672 Fix available 5.6 MediumAugust 10, 2021
• debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 more A flaw was found in the ptp4l program of the linuxptp package. A missing length check when... CVE-2021-3570 Fix available 8.8 HighJuly 5, 2021
• redhat libvirt, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 more An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP... CVE-2020-14301 6.5 MediumNovember 3, 2020
• red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 more Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the... CVE-2020-14355 Fix available 6.6 MediumOctober 6, 2020
• microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +5 more +7 more Microsoft ASP.NET Core Security Feature Bypass Vulnerability CVE-2020-1045 Fix available 7.5 HighSeptember 11, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).... CVE-2020-2590 Fix available 3.7 LowJanuary 15, 2020
• debian linux, linux kernel, canonical ubuntu linux +36 more +38 more There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell... CVE-2019-14816 Fix available 5.5 MediumAugust 28, 2019
• bluetooth br/edr, apple iphone os, mac os x +145 more +147 more Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation CVE-2019-9506 Public exploitFix available 7.6 HighAugust 13, 2019
• clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 more A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification... CVE-2018-16878 Fix available 6.2 MediumApril 17, 2019
• python, canonical ubuntu linux, debian linux +11 more +13 more urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for... CVE-2019-9948 Fix available EPSS 11.8% 9.1 CriticalMarch 23, 2019
• golang go, debian linux, redhat developer tools +4 more +6 more Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom... CVE-2017-15041 Fix available 9.8 CriticalOctober 5, 2017
• debian linux, linux kernel, canonical ubuntu linux +15 more +17 more Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to... CVE-2016-5195 In KEVPublic exploitFix available EPSS 83.5% 7.0 HighOctober 19, 2016
• mit kerberos 5, debian linux, fedoraproject fedora +7 more +9 more MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ... CVE-2014-4341 Fix available 5.0 MediumJuly 20, 2014