Redhat Virtualization vulnerabilities

• kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled CVE-2026-13434 4.9 MediumJune 26, 2026
• kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service CVE-2026-13322 3.8 LowJune 26, 2026
• kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip CVE-2026-13318 Fix available 6.4 MediumJune 25, 2026
• kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher CVE-2026-13218 4.2 MediumJune 25, 2026
• kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body CVE-2026-13208 6.5 MediumJune 24, 2026
• kubevirt, red hat container native virtualization 4.12, container native virtualization 4.13 +10 more +12 more Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption CVE-2026-13201 Fix available 7.3 HighJune 24, 2026
• axios, red hat cryostat 4, gatekeeper 3 +79 more +81 more Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge CVE-2026-44495 Fix available 7.0 HighMay 29, 2026
• immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 more Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable CVE-2026-29063 Fix available 8.7 HighMarch 4, 2026
• nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +5 more +7 more Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service CVE-2025-47711 Fix available 6.5 MediumMay 14, 2025
• fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 more Sssd: race condition during authorization leads to gpo policies functioning inconsistently CVE-2023-3758 Fix available 7.1 HighApril 18, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in __nvmet_req_complete CVE-2023-6536 Fix available 6.5 MediumFebruary 7, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 more Kernel: null pointer dereference in nvmet_tcp_execute_request CVE-2023-6535 Fix available 6.5 MediumFebruary 7, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in nvmet_tcp_build_iovec CVE-2023-6356 Fix available 6.5 MediumFebruary 7, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 more Openvswitch don't match packets on nd_target field CVE-2023-5366 Fix available 7.1 HighOctober 6, 2023
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• cloudbase open vswitch, debian linux, redhat fast datapath +3 more +5 more A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will... CVE-2023-1668 Fix available 8.2 HighApril 10, 2023
• redhat virtualization A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log... CVE-2022-2805 6.5 MediumOctober 19, 2022
• [unknown] dpdk, debian linux, dpdk data plane development kit +6 more +8 more A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker... CVE-2022-2132 Fix available 8.6 HighAugust 30, 2022
• [unknown] vdsm, redhat virtualization, virtualization for ibm power little endian +1 more +3 more A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that... CVE-2022-0207 Fix available 4.7 MediumAugust 26, 2022
• debian linux, linux kernel, redhat enterprise linux +2 more +4 more A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw... CVE-2022-2078 Public exploitFix available 5.5 MediumJune 11, 2022
• debian linux, linux kernel, fedoraproject fedora +10 more +12 more In the Linux kernel before 5.16.15, there is a buffer overflow in ESP transformation in net/ipv4... CVE-2022-27666 Public exploitFix available 7.8 HighMarch 23, 2022
• debian linux, linux kernel, fedoraproject fedora +27 more +29 more A flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers... CVE-2022-1011 Public exploitFix available 7.8 HighMarch 18, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 more Important: kernel security, bug fix, and enhancement update CVE-2022-0847 In KEVPublic exploitFix available EPSS 92.8% 7.8 HighMarch 7, 2022
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in... CVE-2022-0516 Fix available 7.8 HighMarch 1, 2022
• linux kernel, ovirt node, fedoraproject fedora +27 more +29 more Important: kernel security, bug fix, and enhancement update CVE-2022-0435 Public exploitFix available EPSS 67.8% 8.8 HighFebruary 10, 2022
• samba, debian linux, redhat enterprise linux +4 more +6 more A flaw was found in the way Samba handled file/directory metadata. This flaw allows an... CVE-2021-20316 Fix available 6.8 MediumFebruary 8, 2022
• debian linux, linux kernel, canonical ubuntu linux +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2022-0492 In KEVPublic exploitFix available 7.8 HighFebruary 8, 2022
• linux kernel, netapp hci baseboard management controller, redhat enterprise linux +1 more +3 more A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux... CVE-2021-4154 Public exploitFix available 8.8 HighJanuary 31, 2022
• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• advanced intrusion detection environment project intrusion detection environment, canonical ubuntu linux, debian linux +4 more +6 more AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such... CVE-2021-45417 Fix available 7.8 HighJanuary 20, 2022
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• qemu, debian linux, redhat codeready linux builder +7 more +9 more An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while... CVE-2021-3930 Fix available 6.5 MediumDecember 1, 2021
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 more Ansible discloses sensitive information in traceback error message CVE-2021-3620 Fix available 5.5 MediumOctober 23, 2021
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with... CVE-2021-3669 Fix available 5.5 MediumOctober 12, 2021
• debian linux, linux kernel, fedoraproject fedora +16 more +18 more A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls... CVE-2021-3752 Fix available 7.1 HighSeptember 17, 2021
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more Important: kernel security, bug fix, and enhancement update CVE-2021-3744 Fix available 5.5 MediumSeptember 15, 2021
• qemu, canonical ubuntu linux, debian linux +3 more +5 more A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when... CVE-2021-3748 Fix available 7.5 HighAugust 31, 2021
• libssh, debian linux, fedoraproject fedora +4 more +6 more A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two... CVE-2021-3634 Fix available 6.5 MediumAugust 26, 2021
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 more A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... CVE-2021-3621 Fix available 8.8 HighAugust 16, 2021
• postgresql, fedoraproject fedora, redhat enterprise linux +4 more +6 more A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory... CVE-2021-3677 Fix available 6.5 MediumAugust 12, 2021
• linux kernel, fedoraproject fedora, redhat codeready linux builder +12 more +14 more A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking... CVE-2021-3659 Fix available 5.5 MediumAugust 10, 2021
• linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker... CVE-2021-3609 Fix available 7.0 HighJune 21, 2021
• nmstate kubernetes-nmstate, redhat openshift virtualization +1 more Withdrawn Advisory: kubernetes-nmstate Insecure Privilege Management CVE-2020-1742 7.0 HighJune 7, 2021
• polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 more It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests... CVE-2021-3560 In KEVPublic exploitFix available EPSS 22.2% 7.8 HighJune 3, 2021
• Show olderLoading…