Enterprise Linux For Real Time (Redhat) - vulnerabilities (CVEs)

44 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2024-02-07. Vendor: Redhat.

CVEs of Enterprise Linux For Real Time

CVE-2023-6536 - CVSS 7.5 (high), 2024-02-07: A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using…
CVE-2023-6535 - CVSS 7.5 (high), 2024-02-07: A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using…
CVE-2023-6356 - CVSS 7.5 (high), 2024-02-07: A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using…
CVE-2023-6915 - CVSS 6.2 (medium), 2024-01-15: A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a…
CVE-2023-5633 - CVSS 7.8 (high), 2023-10-23: The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled…
CVE-2023-4732 - CVSS 4.7 (medium), 2023-10-03: A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause…
CVE-2023-4147 - CVSS 7.8 (high), 2023-08-07: A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to…
CVE-2023-4132 - CVSS 5.5 (medium), 2023-08-03: A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is…
CVE-2023-3772 - CVSS 5.5 (medium), 2023-07-25: A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN…
CVE-2023-33951 - CVSS 6.7 (medium), 2023-07-24: A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from…
CVE-2023-33952 - CVSS 6.7 (medium), 2023-07-24: A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of…
CVE-2023-0179 - CVSS 7.8 (high), 2023-03-27: A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses,…
CVE-2021-3669 - CVSS 5.5 (medium), 2022-08-26: A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource…
CVE-2021-3659 - CVSS 5.5 (medium), 2022-08-22: A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection.…
CVE-2022-0435 - CVSS 8.8 (high), 2022-03-25: A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of…
CVE-2022-0330 - CVSS 7.8 (high), 2022-03-25: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This…
CVE-2022-1011 - CVSS 7.8 (high), 2022-03-18: A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized…
CVE-2022-0847 - CVSS 7.8 (high), 2022-03-10: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe…
CVE-2021-3656 - CVSS 8.8 (high), 2022-03-04: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block)…
CVE-2021-3744 - CVSS 5.5 (medium), 2022-03-04: A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a…
CVE-2021-3609 - CVSS 7 (high), 2022-03-03: .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory,…
CVE-2021-3752 - CVSS 7.1 (high), 2022-02-16: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a…
CVE-2021-3501 - CVSS 7.1 (high), 2021-05-06: A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated…
CVE-2019-14815 - CVSS 7.8 (high), 2019-11-25: A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
CVE-2019-14816 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to…
CVE-2019-14814 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local…
CVE-2019-14821 - CVSS 8.8 (high), 2019-09-19: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO…
CVE-2019-14835 - CVSS 7.8 (high), 2019-09-17: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs,…
CVE-2019-9506 - CVSS 8.1 (high), 2019-08-14: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from…
CVE-2019-13272 - CVSS 7.8 (high), 2019-07-17: In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace…
CVE-2019-10126 - CVSS 9.8 (critical), 2019-06-14: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might…
CVE-2019-11833 - CVSS 5.5 (medium), 2019-05-15: fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to…
CVE-2019-11884 - CVSS 3.3 (low), 2019-05-10: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information…
CVE-2019-3460 - CVSS 6.5 (medium), 2019-04-11: A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.
CVE-2019-3459 - CVSS 6.5 (medium), 2019-04-11: A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
CVE-2019-3887 - CVSS 6.7 (medium), 2019-04-09: A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest…
CVE-2019-7222 - CVSS 5.5 (medium), 2019-03-21: The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
CVE-2018-20784 - CVSS 9.8 (critical), 2019-02-22: In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in…
CVE-2018-10881 - CVSS 5.5 (medium), 2018-07-26: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service,…
CVE-2018-13405 - CVSS 7.8 (high), 2018-07-06: The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a…
CVE-2017-15129 - CVSS 4.7 (medium), 2018-01-09: A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in…
CVE-2017-18017 - CVSS 9.8 (critical), 2018-01-03: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a…
CVE-2016-4470 - CVSS 5.5 (medium), 2016-06-27: The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which…
CVE-2016-3707 - CVSS 8.1 (high), 2016-06-27: The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before…