CVE-2025-31335
Severity: moderate
Released on: 28/03/2025
Advisory:
Bugzilla: 2355681
Bugzilla Description: opensaml-core: Signature Forgery in OpenSAML
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-347
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2025-2901
Severity: moderate
Released on: 28/03/2025
Advisory:
Bugzilla: 2355685
Bugzilla Description: org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console
CVSS Score:
CVSSv3 Score: 4.6
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2024-12905
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355460
Bugzilla Description: tar-fs: link following and path traversal via maliciously crafted tar file
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: (CWE-22|CWE-59)
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,OpenShift Serverless,Red Hat Developer Hub,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,
Full Details
CVE document

CVE-2025-2857
Severity:
Released on: 27/03/2025
Advisory:
Bugzilla: 2355327
Bugzilla Description: firefox: Firefox IPC sandbox escape on windows
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21871
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355333
Bugzilla Description: kernel: tee: optee: Fix supplicant wait loop
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-31181
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355338
Bugzilla Description: gnuplot: gnuplot segmentation fault on X11_graphics
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2025-31180
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355339
Bugzilla Description: gnuplot: gnuplot segmentation fault on CANVAS_text
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2025-31179
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355340
Bugzilla Description: gnuplot: gnuplot segmentation fault on xstrftime
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2025-31178
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355341
Bugzilla Description: gnuplot: gnuplot segmentation fault on GetAnnotateString
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2025-31177
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355342
Bugzilla Description: gnuplot: gnuplot heap-buffer overflow on utf8_copy_one
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2025-31176
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355343
Bugzilla Description: gnuplot: gnuplot segmentation fault on plot3d_points
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,
Full Details
CVE document

CVE-2025-21885
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355396
Bugzilla Description: kernel: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21890
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355397
Bugzilla Description: kernel: idpf: fix checksums set in idpf_rx_rsc()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21884
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355399
Bugzilla Description: kernel: net: better track kernel sockets lifetime
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21887
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355405
Bugzilla Description: kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21888
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355410
Bugzilla Description: kernel: RDMA/mlx5: Fix a WARN during dereg_mr for DM type
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21876
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355411
Bugzilla Description: kernel: iommu/vt-d: Fix suspicious RCU usage
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21892
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355412
Bugzilla Description: kernel: RDMA/mlx5: Fix the recovery flow of the UMR QP
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21883
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355415
Bugzilla Description: kernel: ice: Fix deinitializing VF in error path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21881
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355422
Bugzilla Description: kernel: uprobes: Reject the shared zeropage in uprobe_write_opcode()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52988
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355431
Bugzilla Description: kernel: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53006
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355432
Bugzilla Description: kernel: cifs: Fix oops due to uncleared server->smbd_conn in reconnect
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52973
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355433
Bugzilla Description: kernel: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53020
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355434
Bugzilla Description: kernel: l2tp: close all race conditions in l2tp_tunnel_register()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49747
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355435
Bugzilla Description: kernel: erofs/zmap.c: Fix incorrect offset calculation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53033
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355437
Bugzilla Description: kernel: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52996
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355438
Bugzilla Description: kernel: ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52928
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355443
Bugzilla Description: kernel: bpf: Skip invalid kfunc call in backtrack_insn
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53002
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355447
Bugzilla Description: kernel: drm/i915: Fix a memory leak with reused mmap_offset
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52979
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355448
Bugzilla Description: kernel: squashfs: harden sanity check in squashfs_read_xattr_id_table
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49761
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355449
Bugzilla Description: kernel: btrfs: always report error in run_one_delayed_ref()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52935
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355450
Bugzilla Description: kernel: mm/khugepaged: fix ->anon_vma race
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53016
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355451
Bugzilla Description: kernel: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53005
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355452
Bugzilla Description: kernel: trace_events_hist: add check for return value of 'create_hist_field'
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49752
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355453
Bugzilla Description: kernel: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52931
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355455
Bugzilla Description: kernel: drm/i915: Avoid potential vm use-after-free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53026
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355457
Bugzilla Description: kernel: RDMA/core: Fix ib block iterator counter overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53024
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355458
Bugzilla Description: kernel: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49749
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355462
Bugzilla Description: kernel: i2c: designware: use casting of u64 in clock multiplication to avoid overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52934
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355463
Bugzilla Description: kernel: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49738
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355467
Bugzilla Description: kernel: f2fs: fix to do sanity check on i_extra_isize in is_alive()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52974
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355469
Bugzilla Description: kernel: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52932
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355470
Bugzilla Description: kernel: mm/swapfile: add cond_resched() in get_swap_pages()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53030
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355471
Bugzilla Description: kernel: octeontx2-pf: Avoid use of GFP_KERNEL in atomic context
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52984
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355472
Bugzilla Description: kernel: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52930
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355474
Bugzilla Description: kernel: drm/i915: Fix potential bit_17 double-free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52933
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355476
Bugzilla Description: kernel: Squashfs: fix handling and sanity checking of xattr_ids count
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52990
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355477
Bugzilla Description: kernel: s390: workaround invalid gcc-11 out of bounds read warning
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49756
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355478
Bugzilla Description: kernel: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49750
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355480
Bugzilla Description: kernel: cpufreq: CPPC: Add u64 casts to avoid overflowing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52980
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355481
Bugzilla Description: kernel: block: ublk: extending queue_size to fix overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52941
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355482
Bugzilla Description: kernel: can: isotp: split tx timer into transmission and timeout
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53021
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355484
Bugzilla Description: kernel: net/sched: sch_taprio: fix possible use-after-free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52999
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355485
Bugzilla Description: kernel: net: fix UaF in netns ops registration error path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49748
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355486
Bugzilla Description: kernel: perf/x86/amd: fix potential integer overflow on shift of a int
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52992
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355487
Bugzilla Description: kernel: bpf: Skip task with pid=1 in send_signal_common()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52940
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355488
Bugzilla Description: kernel: mm: multi-gen LRU: fix crash during cgroup migration
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52986
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355490
Bugzilla Description: kernel: bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52993
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355492
Bugzilla Description: kernel: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53017
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355494
Bugzilla Description: kernel: Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52985
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355496
Bugzilla Description: kernel: arm64: dts: imx8mm-verdin: Do not power down eth-phy
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49759
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355497
Bugzilla Description: kernel: VMCI: Use threaded irqs instead of tasklets
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52942
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355498
Bugzilla Description: kernel: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53007
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355499
Bugzilla Description: kernel: tracing: Make sure trace_printk() can output as soon as it can be used
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53022
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355501
Bugzilla Description: kernel: net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49741
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355503
Bugzilla Description: kernel: fbdev: smscufx: fix error handling code in ufx_usb_probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52994
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355509
Bugzilla Description: kernel: acpi: Fix suspend with Xen PV
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53000
Severity: important
Released on: 27/03/2025
Advisory:
Bugzilla: 2355510
Bugzilla Description: kernel: netlink: prevent potential spectre v1 gadgets
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53018
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355511
Bugzilla Description: kernel: Bluetooth: hci_conn: Fix memory leaks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52937
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355512
Bugzilla Description: kernel: HV: hv_balloon: fix memory leak with using debugfs_lookup()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49755
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355513
Bugzilla Description: kernel: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52976
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355514
Bugzilla Description: kernel: efi: fix potential NULL deref in efi_mem_reserve_persistent
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49739
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355515
Bugzilla Description: kernel: gfs2: Always check inode size of inline inodes
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52938
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355518
Bugzilla Description: kernel: usb: typec: ucsi: Don't attempt to resume the ports before they exist
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52936
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355520
Bugzilla Description: kernel: kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52982
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355522
Bugzilla Description: kernel: fscache: Use wait_on_bit() to wait for the freeing of relinquished volume
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52995
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355523
Bugzilla Description: kernel: riscv/kprobe: Fix instruction simulation of JALR
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53012
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355531
Bugzilla Description: kernel: thermal: core: call put_device() only after device_register() fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49740
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355532
Bugzilla Description: kernel: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-53023
Severity: moderate
Released on: 27/03/2025
Advisory:
Bugzilla: 2355533
Bugzilla Description: kernel: net: nfc: Fix use-after-free in local_cleanup()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2022-49742
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355535
Bugzilla Description: kernel: f2fs: initialize locks earlier in f2fs_fill_super()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52977
Severity: low
Released on: 27/03/2025
Advisory:
Bugzilla: 2355538
Bugzilla Description: kernel: net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-30219
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354973
Bugzilla Description: rabbitmq: RabbitMQ has XSS Vulnerability in an Error Message in Management UI
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2025-2756
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354802
Bugzilla Description: assimp: Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: (CWE-119|CWE-122)
Affected Packages:
Package States: Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2754
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354790
Bugzilla Description: assimp: Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: (CWE-119|CWE-122)
Affected Packages:
Package States: Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2753
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354791
Bugzilla Description: assimp: Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: (CWE-119|CWE-125)
Affected Packages:
Package States: Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2724
Severity: low
Released on: 25/03/2025
Advisory:
Bugzilla: 2354667
Bugzilla Description: libgsf: GNOME libgsf sorting_key_copy out-of-bounds
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: (CWE-119|CWE-125)
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2723
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354668
Bugzilla Description: libgsf: GNOME libgsf gsf_property_settings_collec heap-based overflow
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: (CWE-119|CWE-122)
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27835
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354947
Bugzilla Description: Ghostscript: Buffer overflow when converting glyphs to unicode
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27834
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354948
Bugzilla Description: Ghostscript: Buffer overflow caused by an oversized Type 4 function in a PDF
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27832
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354949
Bugzilla Description: Ghostscript: NPDL device: Compression buffer overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27836
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354952
Bugzilla Description: Ghostscript: device: Print buffer overflow
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27830
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354953
Bugzilla Description: Ghostscript: Buffer overflow during serialization of DollarBlend in font
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27833
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354954
Bugzilla Description: Ghostscript: Buffer overflow with long TTF font name
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27837
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354961
Bugzilla Description: Ghostscript: Access to arbitrary files through truncated path with invalid UTF-8
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27831
Severity: moderate
Released on: 25/03/2025
Advisory:
Bugzilla: 2354963
Bugzilla Description: Ghostscript: Text buffer overflow with long characters
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2877
Severity: important
Released on: 25/03/2025
Advisory:
Bugzilla: 2355540
Bugzilla Description: event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in EDA
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1295
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2025-2783
Severity:
Released on: 25/03/2025
Advisory:
Bugzilla: 2355557
Bugzilla Description: mojo: chromium: chromium Mojo on Windows
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-2720
Severity: low
Released on: 24/03/2025
Advisory:
Bugzilla: 2354658
Bugzilla Description: libgsf: GNOME libgsf gsf_base64_encode_simple uninitialized variable
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: (CWE-453|CWE-457)
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-24514
Severity:
Released on: 24/03/2025
Advisory:
Bugzilla: 2354659
Bugzilla Description: ingress-nginx: ingress-nginx controller - configuration injection via unsanitized auth-url annotation
CVSS Score:
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-24513
Severity:
Released on: 24/03/2025
Advisory:
Bugzilla: 2354660
Bugzilla Description: ingress-nginx: ingress-nginx controller - auth secret file path traversal vulnerability
CVSS Score:
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-1098
Severity:
Released on: 24/03/2025
Advisory:
Bugzilla: 2354662
Bugzilla Description: ingress-nginx: ingress-nginx controller - configuration injection via unsanitized mirror annotations
CVSS Score:
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-1097
Severity:
Released on: 24/03/2025
Advisory:
Bugzilla: 2354657
Bugzilla Description: ingress-nginx: ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
CVSS Score:
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-1974
Severity:
Released on: 24/03/2025
Advisory:
Bugzilla: 2354661
Bugzilla Description: ingress-nginx: ingress-nginx admission controller RCE escalation
CVSS Score:
Vector:
CWE: CWE-653
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-30163
Severity: low
Released on: 24/03/2025
Advisory:
Bugzilla: 2354605
Bugzilla Description: cilium: Node based network policies may incorrectly allow workload traffic
CVSS Score:
CVSSv3 Score: 3.4
Vector:
CWE: CWE-863
Affected Packages:
Package States: Network Observability Operator,Network Observability Operator,Network Observability Operator,Network Observability Operator,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,Power monitoring for Red Hat OpenShift,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,
Full Details
CVE document

CVE-2025-30162
Severity: low
Released on: 24/03/2025
Advisory:
Bugzilla: 2354604
Bugzilla Description: cilium: East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers
CVSS Score:
CVSSv3 Score: 3.2
Vector:
CWE: CWE-863
Affected Packages:
Package States: Network Observability Operator,Network Observability Operator,Network Observability Operator,Network Observability Operator,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,Power monitoring for Red Hat OpenShift,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,
Full Details
CVE document

CVE-2025-22223
Severity: moderate
Released on: 24/03/2025
Advisory:
Bugzilla: 2354599
Bugzilla Description: spring-security: authorization bypass via incorrectly locating method security annotations on parameterized types or methods
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-290
Affected Packages:
Package States: A-MQ Clients 2,OpenShift Developer Tools and Services,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Process Automation 7,Red Hat Single Sign-On 7,streams for Apache Kafka,
Full Details
CVE document

CVE-2025-30208
Severity: moderate
Released on: 24/03/2025
Advisory:
Bugzilla: 2354598
Bugzilla Description: vite: Vite bypasses server.fs.deny when using `?raw??`
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: (CWE-200|CWE-284)
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,
Full Details
CVE document

CVE-2025-30472
Severity: moderate
Released on: 22/03/2025
Advisory:
Bugzilla: 2354229
Bugzilla Description: corosync: Stack buffer overflow from 'orf_token_endian_convert'
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-30204
Severity: important
Released on: 21/03/2025
Advisory: RHSA-2025:3344,
Bugzilla: 2354195
Bugzilla Description: golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-405
Affected Packages: grafana-0:10.2.6-9.el9_5,
Package States: Assisted Installer for Red Hat OpenShift Container Platform,Assisted Installer for Red Hat OpenShift Container Platform,Assisted Installer for Red Hat OpenShift Container Platform,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Cryostat 3,Cryostat 4,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Containers,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Node Maintenance Operator,Node Maintenance Operator,Node Maintenance Operator,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Connectivity Link,Red Hat Connectivity Link,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Cluster Manager CLI,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift on AWS,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat OpenShift Update Service,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat Quay 3,Red Hat Quay 3,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,
Full Details
CVE document

CVE-2025-29927
Severity: critical
Released on: 21/03/2025
Advisory:
Bugzilla: 2354069
Bugzilla Description: nextjs: Authorization Bypass in Next.js Middleware
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-285
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Trusted Artifact Signer,streams for Apache Kafka 2,
Full Details
CVE document

CVE-2025-27612
Severity: moderate
Released on: 21/03/2025
Advisory:
Bugzilla: 2354067
Bugzilla Description: libcontainer: Libcontainer is affected by capabilities elevation
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-276
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2025-2592
Severity: moderate
Released on: 21/03/2025
Advisory:
Bugzilla: 2354071
Bugzilla Description: assimp: Open Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflow
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: (CWE-119|CWE-122)
Affected Packages:
Package States: Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2584
Severity: moderate
Released on: 21/03/2025
Advisory:
Bugzilla: 2354027
Bugzilla Description: wabt: WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: (CWE-119|CWE-122)
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-30346
Severity: moderate
Released on: 21/03/2025
Advisory:
Bugzilla: 2354008
Bugzilla Description: varnish: Client-Side Desynchronization in Varnish Cache
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-444
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-29923
Severity: low
Released on: 20/03/2025
Advisory:
Bugzilla: 2353925
Bugzilla Description: github.com/redis/go-redis: go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-20
Affected Packages:
Package States: Multiarch Tuning Operator,Red Hat Trusted Profile Analyzer,
Full Details
CVE document

CVE-2024-7598
Severity: low
Released on: 20/03/2025
Advisory:
Bugzilla: 2353913
Bugzilla Description: kube-apiserver: Network restriction bypass via race condition during namespace termination
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-362
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-7804
Severity: low
Released on: 20/03/2025
Advisory:
Bugzilla: 2353598
Bugzilla Description: pytorch: Deserialization of Untrusted Data in pytorch/pytorch
CVSS Score:
CVSSv3 Score: 2.6
Vector:
CWE: CWE-502
Affected Packages:
Package States: OpenShift Lightspeed,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2025-0313
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353632
Bugzilla Description: ollama: Improper Validation of Array Index in ollama/ollama
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-129
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2024-8063
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353551
Bugzilla Description: ollama: Divide by Zero in ollama/ollama
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2024-11040
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353624
Bugzilla Description: vllm: Denial of Service in vllm-project/vllm
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2025-0312
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353640
Bugzilla Description: ollama: NULL Pointer Dereference in ollama/ollama
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2024-11041
Severity: low
Released on: 20/03/2025
Advisory:
Bugzilla: 2353718
Bugzilla Description: vllm: Remote Code Execution in vllm-project/vllm
CVSS Score:
CVSSv3 Score: 2.6
Vector:
CWE: CWE-502
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2024-12886
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353630
Bugzilla Description: ollama: Out-Of-Memory (OOM) Vulnerability in ollama/ollama
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2025-0317
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353587
Bugzilla Description: ollama: Divide By Zero in ollama/ollama
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2024-6827
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353700
Bugzilla Description: gunicorn: HTTP Request Smuggling in benoitc/gunicorn
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-444
Affected Packages:
Package States: OpenShift Serverless,Red Hat Discovery,Red Hat Quay 3,
Full Details
CVE document

CVE-2025-0315
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353633
Bugzilla Description: ollama: Allocation of Resources Without Limits or Throttling in ollama/ollama
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2024-12911
Severity: moderate
Released on: 20/03/2025
Advisory:
Bugzilla: 2353719
Bugzilla Description: llama-index: SQL Injection in run-llama/llama_index
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-379
Affected Packages:
Package States: OpenShift Lightspeed,
Full Details
CVE document

CVE-2024-9053
Severity: low
Released on: 20/03/2025
Advisory:
Bugzilla: 2353703
Bugzilla Description: vllm: Remote Code Execution in vllm-project/vllm
CVSS Score:
CVSSv3 Score: 2.6
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2024-9052
Severity: low
Released on: 20/03/2025
Advisory:
Bugzilla: 2353764
Bugzilla Description: vllm: Remote Code Execution by Pickle Deserialization in vllm-project/vllm
CVSS Score:
CVSSv3 Score: 2.6
Vector:
CWE: CWE-502
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2024-8020
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353669
Bugzilla Description: pytorch-lightning: Denial of Service in lightning-ai/pytorch-lightning
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2024-7773
Severity: critical
Released on: 20/03/2025
Advisory:
Bugzilla: 2353591
Bugzilla Description: ollama: Remote Code Execution via ZipSlip in ollama/ollama
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2024-12910
Severity: moderate
Released on: 20/03/2025
Advisory:
Bugzilla: 2353537
Bugzilla Description: llama-index: Denial of Service in run-llama/llama_index
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-400
Affected Packages:
Package States: OpenShift Lightspeed,
Full Details
CVE document

CVE-2024-12704
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353770
Bugzilla Description: llama-index: Denial of Service (DoS) in run-llama/llama_index
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-755
Affected Packages:
Package States: OpenShift Lightspeed,
Full Details
CVE document

CVE-2024-9880
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353639
Bugzilla Description: pandas: Command Injection in pandas-dev/pandas
CVSS Score:
CVSSv3 Score: 8.4
Vector:
CWE: CWE-94
Affected Packages:
Package States: OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2024-10940
Severity: moderate
Released on: 20/03/2025
Advisory:
Bugzilla: 2353815
Bugzilla Description: langchain-core: Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-497
Affected Packages:
Package States: OpenShift Lightspeed,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2024-12055
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353572
Bugzilla Description: ollama: DoS using malicious gguf model file in ollama/ollama
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2025-22228
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353507
Bugzilla Description: spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-863
Affected Packages:
Package States: A-MQ Clients 2,OpenShift Developer Tools and Services,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Quarkus,Red Hat Data Grid 8,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Process Automation 7,Red Hat Single Sign-On 7,streams for Apache Kafka,
Full Details
CVE document

CVE-2025-2559
Severity: moderate
Released on: 20/03/2025
Advisory:
Bugzilla: 2353868
Bugzilla Description: org.keycloak/keycloak-services: JWT Token Cache Exhaustion Leading to Denial of Service (DoS) in Keycloak
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2024-44192
Severity: important
Released on: 20/03/2025
Advisory:
Bugzilla: 2353871
Bugzilla Description: webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-54467
Severity: moderate
Released on: 20/03/2025
Advisory:
Bugzilla: 2353872
Bugzilla Description: webkitgtk: A malicious website may exfiltrate data cross-origin
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-200
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-7631
Severity: moderate
Released on: 19/03/2025
Advisory:
Bugzilla: 2296053
Bugzilla Description: openshift-console: OpenShift Console: Path traversal
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat OpenShift Container Platform 3.11,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-25132
Severity: moderate
Released on: 19/03/2025
Advisory:
Bugzilla: 2260371
Bugzilla Description: openshift-dedicated: hive: hibernation controller denial of service
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-400
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-30153
Severity: important
Released on: 19/03/2025
Advisory:
Bugzilla: 2353383
Bugzilla Description: github.com/getkin/kin-openapi/openapi3filter: Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-409
Affected Packages:
Package States: Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2025-29783
Severity: critical
Released on: 19/03/2025
Advisory:
Bugzilla: 2353374
Bugzilla Description: vllm: vLLM Allows Remote Code Execution via Mooncake Integration
CVSS Score:
CVSSv3 Score: 10.0
Vector:
CWE: CWE-502
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2025-29770
Severity: moderate
Released on: 19/03/2025
Advisory:
Bugzilla: 2353368
Bugzilla Description: vllm: vLLM denial of service via outlines unbounded cache on disk
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2025-30258
Severity: low
Released on: 19/03/2025
Advisory:
Bugzilla: 2353427
Bugzilla Description: gnupg: verification DoS due to a malicious subkey in the keyring
CVSS Score:
CVSSv3 Score: 2.7
Vector:
CWE: CWE-754
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2487
Severity: moderate
Released on: 18/03/2025
Advisory:
Bugzilla: 2353071
Bugzilla Description: 389-ds-base: null pointer dereference leads to denial of service
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Directory Server 11,Red Hat Directory Server 12,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-29781
Severity: moderate
Released on: 17/03/2025
Advisory:
Bugzilla: 2353041
Bugzilla Description: baremetal-operator/apis: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: (CWE-200|CWE-653)
Affected Packages:
Package States: Assisted Installer for Red Hat OpenShift Container Platform,Assisted Installer for Red Hat OpenShift Container Platform,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2024-40635
Severity: moderate
Released on: 17/03/2025
Advisory:
Bugzilla: 2353043
Bugzilla Description: containerd: containerd has an integer overflow in User ID handling
CVSS Score:
CVSSv3 Score: 4.6
Vector:
CWE: CWE-190
Affected Packages:
Package States: Assisted Installer for Red Hat OpenShift Container Platform,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Deployment Validation Operator,Logging Subsystem for Red Hat OpenShift,Migration Toolkit for Virtualization,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Network Observability Operator,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Lightspeed,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Developer Hub,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat OpenShift Virtualization 4,Red Hat Trusted Application Pipeline,
Full Details
CVE document

CVE-2025-2241
Severity: important
Released on: 17/03/2025
Advisory:
Bugzilla: 2351350
Bugzilla Description: hive: Exposure of VCenter Credentials via ClusterProvision in Hive / MCE / ACM
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-922
Affected Packages:
Package States: Multicluster Engine for Kubernetes,Red Hat Advanced Cluster Management for Kubernetes 2,
Full Details
CVE document

CVE-2025-29786
Severity: important
Released on: 17/03/2025
Advisory: RHSA-2025:3335,
Bugzilla: 2352914
Bugzilla Description: github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages: opentelemetry-collector-0:0.107.0-8.el9_5,
Package States: Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Deployment Validation Operator,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,
Full Details
CVE document

CVE-2025-2368
Severity: moderate
Released on: 17/03/2025
Advisory:
Bugzilla: 2352871
Bugzilla Description: wabt: WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: (CWE-119|CWE-122)
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2357
Severity: moderate
Released on: 17/03/2025
Advisory:
Bugzilla: 2352832
Bugzilla Description: DCMTK: DCMTK dcmjpls JPEG-LS Decoder memory corruption
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2025-2310
Severity: moderate
Released on: 14/03/2025
Advisory:
Bugzilla: 2352651
Bugzilla Description: HDF5: HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: (CWE-119|CWE-122)
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2025-29775
Severity: important
Released on: 14/03/2025
Advisory: RHSA-2025:3374,
Bugzilla: 2352600
Bugzilla Description: xml-crypto: xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-347
Affected Packages: registry.redhat.io/rhdh/rhdh-hub-rhel9:sha256:56bfbb2328f42e91d0462e142f3434e5d771737defbc07d8a21dbdf50e468665,
Package States: OpenShift Serverless,
Full Details
CVE document

CVE-2025-29774
Severity: important
Released on: 14/03/2025
Advisory:
Bugzilla: 2352596
Bugzilla Description: xml-crypto: xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-347
Affected Packages:
Package States: OpenShift Serverless,Red Hat Developer Hub,
Full Details
CVE document

CVE-2025-24855
Severity: important
Released on: 14/03/2025
Advisory: RHSA-2025:3107,
Bugzilla: 2352483
Bugzilla Description: libxslt: Use-After-Free in libxslt numbers.c
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-416
Affected Packages: libxslt-0:1.1.34-9.el9_5.1,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-55549
Severity: important
Released on: 14/03/2025
Advisory:
Bugzilla: 2352484
Bugzilla Description: libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2023-52927
Severity: moderate
Released on: 14/03/2025
Advisory:
Bugzilla: 2352567
Bugzilla Description: kernel: netfilter: allow exp not to be removed in nf_ct_find_expectation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2157
Severity: low
Released on: 13/03/2025
Advisory:
Bugzilla: 2351092
Bugzilla Description: foreman: Disclosure of Executed Commands and Outputs in Foreman / Red Hat Satellite
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-922
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2025-29768
Severity: moderate
Released on: 13/03/2025
Advisory:
Bugzilla: 2352418
Bugzilla Description: vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-88
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2024-8176
Severity: moderate
Released on: 13/03/2025
Advisory:
Bugzilla: 2310137
Bugzilla Description: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-674
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Core Services,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2025-1767
Severity: moderate
Released on: 13/03/2025
Advisory:
Bugzilla: 2351269
Bugzilla Description: kubelet: GitRepo Volume Inadvertent Local Repository Access
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-280
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Trusted Artifact Signer,
Full Details
CVE document

CVE-2025-22870
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351766
Bugzilla Description: golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Assisted Installer for Red Hat OpenShift Container Platform,Assisted Installer for Red Hat OpenShift Container Platform,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,cert-manager Operator for Red Hat OpenShift,Cryostat 3,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Fence Agents Remediation Operator,Fence Agents Remediation Operator,Kube Descheduler Operator,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Logging Subsystem for Red Hat OpenShift,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Migration Toolkit for Virtualization,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,NBDE Tang Server,NBDE Tang Server,Network Observability Operator,Network Observability Operator,Network Observability Operator,Network Observability Operator,Network Observability Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node Maintenance Operator,Node Maintenance Operator,Node Maintenance Operator,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,OpenShift Service Mesh 2,Red Hat 3scale API Management Platform 2,Red Hat 3scale API Management Platform 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift on AWS,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat Openshift Sandboxed Containers,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Storage 3,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Web Terminal,Self Node Remediation Operator,Self Node Remediation Operator,
Full Details
CVE document

CVE-2025-27407
Severity: important
Released on: 12/03/2025
Advisory:
Bugzilla: 2351767
Bugzilla Description: graphql-ruby: Remote code execution when loading a crafted GraphQL schema
CVSS Score:
CVSSv3 Score: 8.5
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2025-29891
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351685
Bugzilla Description: camel-http: org.apache.camel: Apache Camel: Camel Message Header Injection through request parameters
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-164
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat Process Automation 7,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2025-27788
Severity: important
Released on: 12/03/2025
Advisory:
Bugzilla: 2351856
Bugzilla Description: json: Ruby JSON Parser has Out-of-bounds Read
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2025-24912
Severity: low
Released on: 12/03/2025
Advisory:
Bugzilla: 2351487
Bugzilla Description: hostapd: RADIUS Packet Processing Flaw in hostapd
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-826
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-2240
Severity: important
Released on: 12/03/2025
Advisory:
Bugzilla: 2351452
Bugzilla Description: smallrye-fault-tolerance: SmallRye Fault Tolerance
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1325
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apicurio Registry 2,Red Hat build of Quarkus,Red Hat build of Quarkus,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2024-58087
Severity: important
Released on: 12/03/2025
Advisory:
Bugzilla: 2351471
Bugzilla Description: kernel: ksmbd: fix racy issue from session lookup and expire
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-667
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21857
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351605
Bugzilla Description: kernel: net/sched: cls_api: fix error handling causing NULL dereference
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21851
Severity: low
Released on: 12/03/2025
Advisory:
Bugzilla: 2351606
Bugzilla Description: kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel
CVSS Score:
CVSSv3 Score: 2.3
Vector:
CWE: CWE-667
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58089
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351607
Bugzilla Description: kernel: btrfs: fix double accounting race when btrfs_run_delalloc_range() failed
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21855
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351608
Bugzilla Description: kernel: ibmvnic: Don't reference skb after sending to VIOS
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21856
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351609
Bugzilla Description: kernel: s390/ism: add release function for struct device
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21850
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351611
Bugzilla Description: kernel: nvmet: Fix crash when a namespace is disabled
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21844
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351612
Bugzilla Description: kernel: smb: client: Add check for next_buffer in receive_encrypted_standard()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21853
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351613
Bugzilla Description: kernel: bpf: avoid holding freeze_mutex during mmap operation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21852
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351614
Bugzilla Description: kernel: net: Add rx_skb of kfree_skb to raw_tp_null_args[].
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21847
Severity: low
Released on: 12/03/2025
Advisory:
Bugzilla: 2351616
Bugzilla Description: kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21845
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351617
Bugzilla Description: kernel: mtd: spi-nor: sst: Fix SST write failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21864
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351618
Bugzilla Description: kernel: tcp: drop secpath at the same time as we currently drop dst
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58088
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351620
Bugzilla Description: kernel: bpf: Fix deadlock when freeing cgroup storage
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-667
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21849
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351621
Bugzilla Description: kernel: drm/i915/gt: Use spin_lock_irqsave() in interruptible context
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-667
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21860
Severity: low
Released on: 12/03/2025
Advisory:
Bugzilla: 2351622
Bugzilla Description: kernel: mm/zswap: fix inconsistency when zswap_store_page() fails
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21866
Severity: low
Released on: 12/03/2025
Advisory:
Bugzilla: 2351623
Bugzilla Description: kernel: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21846
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351624
Bugzilla Description: kernel: acct: perform last write from workqueue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21861
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351625
Bugzilla Description: kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21862
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351626
Bugzilla Description: kernel: drop_monitor: fix incorrect initialization order
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21859
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351628
Bugzilla Description: kernel: USB: gadget: f_midi: f_midi_complete to call queue_work
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21863
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351629
Bugzilla Description: kernel: io_uring: prevent opcode speculation
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21854
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351631
Bugzilla Description: kernel: sockmap, vsock: For connectible sockets allow only connected
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21848
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351633
Bugzilla Description: kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-395
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21865
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351635
Bugzilla Description: kernel: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-25975
Severity: moderate
Released on: 12/03/2025
Advisory:
Bugzilla: 2351765
Bugzilla Description: parse-git-config: Prototype Pollution Vulneralbility in parse-git-config
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1321
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,
Full Details
CVE document

CVE-2025-24070
Severity: important
Released on: 11/03/2025
Advisory: RHSA-2025:2670, RHSA-2025:2669, RHSA-2025:2667, RHSA-2025:2668, RHSA-2025:2666,
Bugzilla: 2349733
Bugzilla Description: dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-269
Affected Packages: dotnet8.0-0:8.0.114-1.el9_5,dotnet8.0-0:8.0.114-1.el9_4,dotnet9.0-0:9.0.104-1.el9_5,dotnet9.0-0:9.0.104-1.el8_10,dotnet8.0-0:8.0.114-1.el8_10,
Package States: Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27363
Severity: important
Released on: 11/03/2025
Advisory:
Bugzilla: 2351357
Bugzilla Description: freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat build of OpenJDK 11,Red Hat build of OpenJDK 17,Red Hat build of OpenJDK 21,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2025-1550
Severity: important
Released on: 11/03/2025
Advisory:
Bugzilla: 2351304
Bugzilla Description: keras: Arbitrary Code Execution via Crafted Keras Config for Model Loading
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2025-24201
Severity: important
Released on: 11/03/2025
Advisory: RHSA-2025:3002, RHSA-2025:3034, RHSA-2025:3001, RHSA-2025:3000, RHSA-2025:2997, RHSA-2025:2998, RHSA-2025:2863, RHSA-2025:2864, RHSA-2025:3005,
Bugzilla: 2351802
Bugzilla Description: webkitgtk: out-of-bounds write vulnerability
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages: webkit2gtk3-0:2.46.6-2.el8_4,webkit2gtk3-0:2.46.6-2.el9_4,webkit2gtk3-0:2.46.6-2.el8_6,webkit2gtk3-0:2.46.6-2.el9_5,webkit2gtk3-0:2.46.6-2.el9_0,webkit2gtk3-0:2.46.6-2.el8_2,webkit2gtk3-0:2.46.6-2.el9_2,webkit2gtk3-0:2.46.6-2.el8_8,webkit2gtk3-0:2.46.6-2.el8_10,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2025-27610
Severity: important
Released on: 10/03/2025
Advisory:
Bugzilla: 2351231
Bugzilla Description: rack: rubygem-rack: Local File Inclusion in Rack::Static
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-23
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Storage 3,
Full Details
CVE document

CVE-2025-26695
Severity: low
Released on: 10/03/2025
Advisory:
Bugzilla: 2351146
Bugzilla Description: thunderbird: Downloading of OpenPGP keys from WKD used incorrect padding
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-203
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-26696
Severity: moderate
Released on: 10/03/2025
Advisory:
Bugzilla: 2351157
Bugzilla Description: thunderbird: Crafted email message incorrectly shown as being encrypted
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-451
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-24813
Severity: moderate
Released on: 10/03/2025
Advisory:
Bugzilla: 2351129
Bugzilla Description: tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CVSS Score:
CVSSv3 Score: 8.6
Vector:
CWE: (CWE-44|CWE-502)
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Web Server 5,Red Hat JBoss Web Server 6,
Full Details
CVE document

CVE-2025-27636
Severity: moderate
Released on: 10/03/2025
Advisory: RHSA-2025:3091,
Bugzilla: 2350682
Bugzilla Description: camel-http: org.apache.camel: bypass of header filters via specially crafted response
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-644
Affected Packages: org.apache.camel/camel-http,org.apache.camel/camel-http-base,
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat Integration Camel K 1,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Process Automation 7,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2025-25977
Severity: moderate
Released on: 10/03/2025
Advisory:
Bugzilla: 2351128
Bugzilla Description: canvg: Prototype Pollution Vulneralbility
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1321
Affected Packages:
Package States: Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,
Full Details
CVE document

CVE-2023-52968
Severity: moderate
Released on: 08/03/2025
Advisory:
Bugzilla: 2350915
Bugzilla Description: mariadb: Crash in MariaDB Due to Improper Handling of Derived Tables
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-696
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52969
Severity: moderate
Released on: 08/03/2025
Advisory:
Bugzilla: 2350916
Bugzilla Description: mariadb: MariaDB Server Crash Due to Empty Backtrace Log
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-1038
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52971
Severity: moderate
Released on: 08/03/2025
Advisory:
Bugzilla: 2350917
Bugzilla Description: mariadb: MariaDB Server Crash
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-1038
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2023-52970
Severity: moderate
Released on: 08/03/2025
Advisory:
Bugzilla: 2350918
Bugzilla Description: mariadb: MariaDB Server Crash via Item_direct_view_ref
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-1038
Affected Packages:
Package States: Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27607
Severity: important
Released on: 07/03/2025
Advisory:
Bugzilla: 2350638
Bugzilla Description: python-json-logger: Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-829
Affected Packages:
Package States: Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,
Full Details
CVE document

CVE-2025-27152
Severity: moderate
Released on: 07/03/2025
Advisory:
Bugzilla: 2350618
Bugzilla Description: axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-918
Affected Packages:
Package States: Cryostat 3,Migration Toolkit for Applications 7,Migration Toolkit for Applications 7,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Network Observability Operator,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,OpenShift Service Mesh 2,OpenShift Service Mesh 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 2,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Discovery,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift GitOps,Red Hat OpenShift Virtualization 4,Red Hat Process Automation 7,Red Hat Quay 3,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,Red Hat Trusted Artifact Signer,streams for Apache Kafka 2,
Full Details
CVE document

CVE-2025-21840
Severity: low
Released on: 07/03/2025
Advisory:
Bugzilla: 2350581
Bugzilla Description: kernel: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21838
Severity: moderate
Released on: 07/03/2025
Advisory:
Bugzilla: 2350582
Bugzilla Description: kernel: usb: gadget: core: flush gadget workqueue after device removal
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21835
Severity: moderate
Released on: 07/03/2025
Advisory:
Bugzilla: 2350583
Bugzilla Description: kernel: usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21836
Severity: moderate
Released on: 07/03/2025
Advisory:
Bugzilla: 2350584
Bugzilla Description: kernel: io_uring/kbuf: reallocate buf lists on upgrade
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21839
Severity: moderate
Released on: 07/03/2025
Advisory:
Bugzilla: 2350585
Bugzilla Description: kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21843
Severity: moderate
Released on: 07/03/2025
Advisory:
Bugzilla: 2350586
Bugzilla Description: kernel: drm/panthor: avoid garbage value in panthor_ioctl_dev_query()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21842
Severity: low
Released on: 07/03/2025
Advisory:
Bugzilla: 2350587
Bugzilla Description: kernel: amdkfd: properly free gang_ctx_bo when failed to init user queue
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21841
Severity: low
Released on: 07/03/2025
Advisory:
Bugzilla: 2350588
Bugzilla Description: kernel: cpufreq/amd-pstate: Fix cpufreq_policy ref counting
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21837
Severity: important
Released on: 07/03/2025
Advisory:
Bugzilla: 2350589
Bugzilla Description: kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-25294
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350421
Bugzilla Description: envoyproxy/gateway: Envoy Gateway Log Injection Vulnerability
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-117
Affected Packages:
Package States: Red Hat Connectivity Link,Red Hat Connectivity Link,
Full Details
CVE document

CVE-2025-26699
Severity: moderate
Released on: 06/03/2025
Advisory: RHSA-2025:3162, RHSA-2025:3160,
Bugzilla: 2348993
Bugzilla Description: django: Potential denial-of-service vulnerability in django.utils.text.wrap()
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages: python3.11-django-0:4.2.20-1.el8ap,ansible-automation-platform-25/lightspeed-rhel8:2.5.250318-2,python3.11-django-0:4.2.20-1.el9ap,
Package States: Red Hat Ansible Automation Platform 1.2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery,
Full Details
CVE document

CVE-2025-1979
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350231
Bugzilla Description: ray: Insertion of Sensitive Information into Log File
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-532
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI),
Full Details
CVE document

CVE-2024-58070
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350348
Bugzilla Description: kernel: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58058
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350349
Bugzilla Description: kernel: ubifs: skip dumping tnc tree when zroot is null
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58055
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350350
Bugzilla Description: kernel: usb: gadget: f_tcm: Don't free command immediately
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58065
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350351
Bugzilla Description: kernel: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58052
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350352
Bugzilla Description: kernel: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58073
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350353
Bugzilla Description: kernel: drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58064
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350354
Bugzilla Description: kernel: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58054
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350357
Bugzilla Description: kernel: staging: media: max96712: fix kernel oops when removing module
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58056
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350358
Bugzilla Description: kernel: remoteproc: core: Fix ida_free call while not allocated
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58067
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350361
Bugzilla Description: kernel: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58066
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350362
Bugzilla Description: kernel: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58072
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350363
Bugzilla Description: kernel: wifi: rtlwifi: remove unused check_buddy_priv
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58069
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350364
Bugzilla Description: kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58059
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350365
Bugzilla Description: kernel: media: uvcvideo: Fix deadlock during uvc_probe
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58063
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350366
Bugzilla Description: kernel: wifi: rtlwifi: fix memory leaks and invalid access at probe error path
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58068
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350367
Bugzilla Description: kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-395
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58053
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350369
Bugzilla Description: kernel: rxrpc: Fix handling of received connection abort
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58071
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350370
Bugzilla Description: kernel: team: prevent adding a device which is already a team device lower
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58060
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350371
Bugzilla Description: kernel: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58061
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350373
Bugzilla Description: kernel: wifi: mac80211: prohibit deactivating all links
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58062
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350374
Bugzilla Description: kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58057
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350375
Bugzilla Description: kernel: idpf: convert workqueues to unbound
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58051
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350376
Bugzilla Description: kernel: ipmi: ipmb: Add check devm_kasprintf() returned value
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58076
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350382
Bugzilla Description: kernel: clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58079
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350383
Bugzilla Description: kernel: media: uvcvideo: Fix crash during unbind if gpio unit is in use
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21831
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350385
Bugzilla Description: kernel: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21828
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350386
Bugzilla Description: kernel: wifi: mac80211: don't flush non-uploaded STAs
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58074
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350387
Bugzilla Description: kernel: drm/i915: Grab intel_display from the encoder to avoid potential oopsies
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58083
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350388
Bugzilla Description: kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21833
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350390
Bugzilla Description: kernel: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58080
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350391
Bugzilla Description: kernel: clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21826
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350392
Bugzilla Description: kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58086
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350393
Bugzilla Description: kernel: drm/v3d: Stop active perfmon if it is being destroyed
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58085
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350394
Bugzilla Description: kernel: tomoyo: don't emit warning in tomoyo_write_control()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21827
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350395
Bugzilla Description: kernel: Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-413
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58077
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350396
Bugzilla Description: kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58075
Severity: moderate
Released on: 06/03/2025
Advisory:
Bugzilla: 2350397
Bugzilla Description: kernel: crypto: tegra - do not transfer req when tegra init fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21834
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350398
Bugzilla Description: kernel: seccomp: passthrough uretprobe systemcall without filtering
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58078
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350399
Bugzilla Description: kernel: misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21829
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350400
Bugzilla Description: kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21832
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350402
Bugzilla Description: kernel: block: don't revert iter for -EIOCBQUEUED
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-252
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58082
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350403
Bugzilla Description: kernel: media: nuvoton: Fix an error check in npcm_video_ece_init()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58084
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350404
Bugzilla Description: kernel: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21830
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350405
Bugzilla Description: kernel: landlock: Handle weird files
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-20
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21825
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350406
Bugzilla Description: kernel: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58081
Severity: low
Released on: 06/03/2025
Advisory:
Bugzilla: 2350408
Bugzilla Description: kernel: clk: mmp2: call pm_genpd_init() only after genpd.name is set
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27624
Severity: moderate
Released on: 05/03/2025
Advisory:
Bugzilla: 2350208
Bugzilla Description: jenkins: CSRF vulnerability in jenkins
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-352
Affected Packages:
Package States: OpenShift Developer Tools and Services,Red Hat Developer Hub,
Full Details
CVE document

CVE-2025-27625
Severity: moderate
Released on: 05/03/2025
Advisory:
Bugzilla: 2350210
Bugzilla Description: jenkins: Open redirect vulnerability
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-601
Affected Packages:
Package States: OpenShift Developer Tools and Services,Red Hat Developer Hub,
Full Details
CVE document

CVE-2025-27623
Severity: moderate
Released on: 05/03/2025
Advisory:
Bugzilla: 2350209
Bugzilla Description: jenkins: Encrypted values of secrets stored in view configuration revealed to users with View/Read permission
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-523
Affected Packages:
Package States: OpenShift Developer Tools and Services,Red Hat Developer Hub,
Full Details
CVE document

CVE-2025-27622
Severity: moderate
Released on: 05/03/2025
Advisory:
Bugzilla: 2350211
Bugzilla Description: jenkins: Encrypted values of secrets stored in agent configuration revealed to users with Agent/Extended Read permission
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-319
Affected Packages:
Package States: OpenShift Developer Tools and Services,Red Hat Developer Hub,
Full Details
CVE document

CVE-2025-27516
Severity: important
Released on: 05/03/2025
Advisory: RHSA-2025:3124, RHSA-2025:3113, RHSA-2025:3123, RHSA-2025:3111, RHSA-2025:3162, RHSA-2025:3371, RHSA-2025:3160, RHSA-2025:3017, RHSA-2025:2688, RHSA-2025:2664,
Bugzilla: 2350190
Bugzilla Description: jinja2: Jinja sandbox breakout through attr filter selecting format method
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-1336
Affected Packages: python3.11-jinja2-0:3.1.6-1.el8ap,python3.11-jinja2-0:3.1.6-1.el9ap,ansible-automation-platform/ee-minimal-rhel8:2.16.14-11,fence-agents-0:4.10.0-20.el9_0.21,python3x-jinja2-0:3.1.6-1.el8ap,python-jinja2-0:3.1.6-1.el9ap,automation-controller-0:4.6.10-1.el9ap,automation-controller-0:4.6.10-1.el8ap,fence-agents-0:4.10.0-62.el9_4.11,fence-agents-0:4.10.0-76.el9_5.6,fence-agents-0:4.10.0-43.el9_2.12,ansible-automation-platform/ee-minimal-rhel9:2.16.14-12,automation-controller-0:4.5.20-1.el9ap,automation-controller-0:4.5.20-1.el8ap,ansible-automation-platform-25/lightspeed-rhel8:2.5.250318-2,ansible-automation-platform-24/lightspeed-rhel8:2.4.250225-5,openstack-ansible-core-0:2.14.2-4.7.el9ost,
Package States: OpenShift Serverless,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Developer Hub,Red Hat Discovery,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat Enterprise Linux AI (RHEL AI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Quay 3,
Full Details
CVE document

CVE-2024-36347
Severity: important
Released on: 05/03/2025
Advisory:
Bugzilla: 2336412
Bugzilla Description: kernel: hw:amd: Improper signature verification in AMD CPU ROM microcode patch loader
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1080
Severity: important
Released on: 04/03/2025
Advisory: RHSA-2025:3267, RHSA-2025:3265, RHSA-2025:2868, RHSA-2025:3269, RHSA-2025:3169,
Bugzilla: 2349906
Bugzilla Description: libreoffice: Macro URL arbitrary script execution
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-20
Affected Packages: libreoffice-1:6.4.7.2-18.el8_4,libreoffice-1:6.4.7.2-18.el8_6,libreoffice-1:6.0.6.1-23.el8_2,libreoffice-1:6.4.7.2-19.el8_10,libreoffice-1:6.4.7.2-18.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27111
Severity: moderate
Released on: 04/03/2025
Advisory:
Bugzilla: 2349810
Bugzilla Description: rack: rubygem-rack: Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: (CWE-117|CWE-93)
Affected Packages:
Package States: Logging Subsystem for Red Hat OpenShift,Red Hat 3scale API Management Platform 2,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Storage 3,
Full Details
CVE document

CVE-2025-1943
Severity: important
Released on: 04/03/2025
Advisory:
Bugzilla: 2349789
Bugzilla Description: firefox: thunderbird: Memory safety bugs fixed in Firefox 136 and Thunderbird 136
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1938
Severity: important
Released on: 04/03/2025
Advisory: RHSA-2025:2708, RHSA-2025:2959, RHSA-2025:2957, RHSA-2025:2958, RHSA-2025:2900, RHSA-2025:3009, RHSA-2025:2359, RHSA-2025:2899, RHSA-2025:2699, RHSA-2025:2479, RHSA-2025:2960, RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:3036, RHSA-2025:2486, RHSA-2025:3013, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480,
Bugzilla: 2349793
Bugzilla Description: firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-120
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_10,thunderbird-0:128.8.0-2.el8_6,thunderbird-0:128.8.0-2.el9_5,thunderbird-0:128.8.0-2.el9_4,thunderbird-0:128.8.0-2.el8_4,thunderbird-0:128.8.0-2.el8_10,thunderbird-0:128.8.0-2.el9_2,thunderbird-0:128.8.0-2.el8_2,thunderbird-0:128.8.0-2.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,thunderbird-0:128.8.0-2.el8_8,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1937
Severity: important
Released on: 04/03/2025
Advisory: RHSA-2025:2708, RHSA-2025:2959, RHSA-2025:2957, RHSA-2025:2958, RHSA-2025:2900, RHSA-2025:3009, RHSA-2025:2359, RHSA-2025:2899, RHSA-2025:2699, RHSA-2025:2479, RHSA-2025:2960, RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:3036, RHSA-2025:2486, RHSA-2025:3013, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480,
Bugzilla: 2349795
Bugzilla Description: firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-120
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_10,thunderbird-0:128.8.0-2.el8_6,thunderbird-0:128.8.0-2.el9_5,thunderbird-0:128.8.0-2.el9_4,thunderbird-0:128.8.0-2.el8_4,thunderbird-0:128.8.0-2.el8_10,thunderbird-0:128.8.0-2.el9_2,thunderbird-0:128.8.0-2.el8_2,thunderbird-0:128.8.0-2.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,thunderbird-0:128.8.0-2.el8_8,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1936
Severity: low
Released on: 04/03/2025
Advisory: RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:2486, RHSA-2025:2708, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480, RHSA-2025:2359, RHSA-2025:2699, RHSA-2025:2479,
Bugzilla: 2349797
Bugzilla Description: firefox: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-754
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,firefox-0:128.8.0-1.el8_10,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1941
Severity: moderate
Released on: 04/03/2025
Advisory:
Bugzilla: 2349785
Bugzilla Description: firefox: Lock screen setting bypass in Firefox Focus for Android
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-306
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1942
Severity: moderate
Released on: 04/03/2025
Advisory:
Bugzilla: 2349791
Bugzilla Description: firefox: Disclosure of uninitialized memory when .toUpperCase() causes string to get longer
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1935
Severity: low
Released on: 04/03/2025
Advisory: RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:2486, RHSA-2025:2708, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480, RHSA-2025:2359, RHSA-2025:2699, RHSA-2025:2479,
Bugzilla: 2349792
Bugzilla Description: firefox: Clickjacking the registerProtocolHandler info-bar Reporter
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1021
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,firefox-0:128.8.0-1.el8_10,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1940
Severity: moderate
Released on: 04/03/2025
Advisory:
Bugzilla: 2349788
Bugzilla Description: firefox: Android Intent confirmation prompt tapjacking using Select options
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-451
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1934
Severity: moderate
Released on: 04/03/2025
Advisory: RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:2486, RHSA-2025:2708, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480, RHSA-2025:2359, RHSA-2025:2699, RHSA-2025:2479,
Bugzilla: 2349790
Bugzilla Description: firefox: Unexpected GC during RegExp bailout processing
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-460
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,firefox-0:128.8.0-1.el8_10,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1931
Severity: important
Released on: 04/03/2025
Advisory: RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:2486, RHSA-2025:2708, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480, RHSA-2025:2359, RHSA-2025:2699, RHSA-2025:2479,
Bugzilla: 2349786
Bugzilla Description: firefox: Use-after-free in WebTransportChild
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-416
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,firefox-0:128.8.0-1.el8_10,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1933
Severity: important
Released on: 04/03/2025
Advisory: RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:2486, RHSA-2025:2708, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480, RHSA-2025:2359, RHSA-2025:2699, RHSA-2025:2479,
Bugzilla: 2349794
Bugzilla Description: firefox: JIT corruption of WASM i32 return values on 64-bit CPUs
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-843
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,firefox-0:128.8.0-1.el8_10,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1932
Severity: important
Released on: 04/03/2025
Advisory: RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:2486, RHSA-2025:2708, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480, RHSA-2025:2359, RHSA-2025:2699, RHSA-2025:2479,
Bugzilla: 2349796
Bugzilla Description: firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access
CVSS Score:
CVSSv3 Score: 8.3
Vector:
CWE: CWE-125
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,firefox-0:128.8.0-1.el8_10,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1930
Severity: important
Released on: 04/03/2025
Advisory: RHSA-2025:2452, RHSA-2025:2485, RHSA-2025:2486, RHSA-2025:2708, RHSA-2025:2484, RHSA-2025:2481, RHSA-2025:2480, RHSA-2025:2359, RHSA-2025:2699, RHSA-2025:2479,
Bugzilla: 2349787
Bugzilla Description: firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process
CVSS Score:
CVSSv3 Score: 8.3
Vector:
CWE: CWE-416
Affected Packages: firefox-0:128.8.0-1.el9_2,firefox-0:128.8.0-1.el8_2,firefox-0:128.8.0-1.el9_0,firefox-0:128.8.0-1.el8_6,firefox-0:128.8.0-1.el9_5,firefox-0:128.8.0-1.el9_4,firefox-0:128.8.0-1.el8_4,firefox-0:128.8.0-1.el8_10,firefox-0:128.8.0-1.el7_9,firefox-0:128.8.0-1.el8_8,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1939
Severity: important
Released on: 04/03/2025
Advisory:
Bugzilla: 2349798
Bugzilla Description: firefox: Tapjacking in Android Custom Tabs using transition animations
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-1021
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27423
Severity: moderate
Released on: 03/03/2025
Advisory:
Bugzilla: 2349561
Bugzilla Description: vim: Improper Input Validation in Vim
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-77
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2025-1866
Severity: important
Released on: 03/03/2025
Advisory:
Bugzilla: 2349439
Bugzilla Description: libwebsockets: Undefined Behavior Due to Out-of-Bounds Pointer Arithmetic in libwebsockets
CVSS Score:
CVSSv3 Score: 8.0
Vector:
CWE: CWE-119
Affected Packages:
Package States: A-MQ Interconnect 1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,
Full Details
CVE document

CVE-2025-23368
Severity: important
Released on: 03/03/2025
Advisory:
Bugzilla: 2337621
Bugzilla Description: org.wildfly.core:wildfly-elytron-integration: Wildfly Elytron Brute Force Attack via CLI
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-307
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Data Grid 8,Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat JBoss Data Grid 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Process Automation 7,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2024-53382
Severity: moderate
Released on: 03/03/2025
Advisory:
Bugzilla: 2349390
Bugzilla Description: prismjs: DOM Clobbering vulnerability within the Prism library's prism-autoloader plugin
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-94
Affected Packages:
Package States: Migration Toolkit for Virtualization,OpenShift Pipelines,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat build of Apicurio Registry 2,Red Hat Ceph Storage 6,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Data Grid 8,Red Hat Developer Hub,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI),Red Hat Fuse 7,Red Hat Integration Camel K 1,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat OpenShift GitOps,Red Hat Storage 3,Red Hat Trusted Artifact Signer,
Full Details
CVE document

CVE-2025-27220
Severity: moderate
Released on: 03/03/2025
Advisory:
Bugzilla: 2349696
Bugzilla Description: CGI: ReDoS in CGI::Util#escapeElement.
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27219
Severity: moderate
Released on: 03/03/2025
Advisory:
Bugzilla: 2349699
Bugzilla Description: CGI: Denial of Service in CGI::Cookie.parse
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-27221
Severity: low
Released on: 03/03/2025
Advisory:
Bugzilla: 2349700
Bugzilla Description: uri: userinfo leakage in URI#join, URI#merge and URI#+
CVSS Score:
CVSSv3 Score: 3.2
Vector:
CWE: CWE-212
Affected Packages:
Package States: Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-25724
Severity: moderate
Released on: 02/03/2025
Advisory:
Bugzilla: 2349221
Bugzilla Description: libarchive: Buffer Overflow vulnerability in libarchive
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-252
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2022-49733
Severity: low
Released on: 02/03/2025
Advisory:
Bugzilla: 2349258
Bugzilla Description: kernel: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-1801
Severity: important
Released on: 01/03/2025
Advisory: RHSA-2025:1954,
Bugzilla: 2349081
Bugzilla Description: aap-gateway: aap-gateway privilege escalation
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-362
Affected Packages: automation-gateway-0:2.5.20250305-1.el9ap,automation-gateway-0:2.5.20250305-1.el8ap,
Package States:
Full Details
CVE document

CVE-2025-27414
Severity: important
Released on: 28/02/2025
Advisory:
Bugzilla: 2349095
Bugzilla Description: minio: MinIO SFTP authentication bypass due to improperly trusted SSH key
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-287
Affected Packages:
Package States:
Full Details
CVE document

CVE-2025-1795
Severity: low
Released on: 28/02/2025
Advisory:
Bugzilla: 2349061
Bugzilla Description: python: Mishandling of comma during folding and unicode-encoding of email headers
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-168
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-12225
Severity: important
Released on: 28/02/2025
Advisory:
Bugzilla: 2330484
Bugzilla Description: io.quarkus:quarkus-security-webauthn: Quarkus WebAuthn Unexpected Authentication Bypass
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-288
Affected Packages:
Package States: Red Hat build of Quarkus,
Full Details
CVE document

CVE-2025-1686
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348665
Bugzilla Description: io.pebbletemplates:pebble: Path Traversal Vulnerability in Pebble Templates
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-73
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,
Full Details
CVE document

CVE-2025-21775
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348508
Bugzilla Description: kernel: can: ctucanfd: handle skb allocation failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21760
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348509
Bugzilla Description: kernel: ndisc: extend RCU protection in ndisc_send_skb()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21770
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348510
Bugzilla Description: kernel: iommu: Fix potential memory leak in iopf_queue_remove_device()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-401
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21783
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348511
Bugzilla Description: kernel: gpiolib: Fix crash on error in gpiochip_get_ngpios()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57974
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348512
Bugzilla Description: kernel: udp: Deal with race between UDP socket address change and rehash
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58002
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348513
Bugzilla Description: kernel: media: uvcvideo: Remove dangling pointers
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21757
Severity: important
Released on: 27/02/2025
Advisory:
Bugzilla: 2348514
Bugzilla Description: kernel: net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21746
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348515
Bugzilla Description: kernel: Input: synaptics - fix crash when enabling pass-through port
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21727
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348516
Bugzilla Description: kernel: padata: fix UAF in padata_reorder
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21731
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348517
Bugzilla Description: kernel: nbd: don't allow reconnect after disconnect
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21778
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348518
Bugzilla Description: kernel: tracing: Do not allow mmap() of persistent ring buffer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21708
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348519
Bugzilla Description: kernel: net: usb: rtl8150: enable basic endpoint checking
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21722
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348520
Bugzilla Description: kernel: nilfs2: do not force clear folio if buffer is referenced
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58019
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348521
Bugzilla Description: kernel: nvkm/gsp: correctly advance the read pointer of GSP message queue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21732
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348522
Bugzilla Description: kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21795
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348523
Bugzilla Description: kernel: NFSD: fix hang in nfsd4_shutdown_callback
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21736
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348524
Bugzilla Description: kernel: nilfs2: fix possible int overflows in nilfs_fiemap()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57983
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348525
Bugzilla Description: kernel: mailbox: th1520: Fix memory corruption due to incorrect array size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58009
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348526
Bugzilla Description: kernel: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21718
Severity: important
Released on: 27/02/2025
Advisory:
Bugzilla: 2348527
Bugzilla Description: kernel: net: rose: fix timer races against user threads
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21728
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348528
Bugzilla Description: kernel: bpf: Send signals asynchronously if !preemptible
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21763
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348529
Bugzilla Description: kernel: neighbour: use RCU protection in __neigh_notify()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57852
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348530
Bugzilla Description: kernel: firmware: qcom: scm: smc: Handle missing SCM device
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21758
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348531
Bugzilla Description: kernel: ipv6: mcast: add RCU protection to mld_newpack()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57999
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348532
Bugzilla Description: kernel: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58016
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348533
Bugzilla Description: kernel: safesetid: check size of policy writes
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21789
Severity: important
Released on: 27/02/2025
Advisory:
Bugzilla: 2348534
Bugzilla Description: kernel: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-52559
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348535
Bugzilla Description: kernel: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57991
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348536
Bugzilla Description: kernel: wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58021
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348537
Bugzilla Description: kernel: HID: winwing: Add NULL check in winwing_init_led()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-52560
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348538
Bugzilla Description: kernel: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21768
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348539
Bugzilla Description: kernel: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21735
Severity: important
Released on: 27/02/2025
Advisory:
Bugzilla: 2348540
Bugzilla Description: kernel: NFC: nci: Add bounds checking in nci_hci_create_pipe()
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-54456
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348541
Bugzilla Description: kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21747
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348542
Bugzilla Description: kernel: drm/ast: astdp: Fix timeout for enabling video signal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57987
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348543
Bugzilla Description: kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21715
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348544
Bugzilla Description: kernel: net: davicom: fix UAF in dm9000_drv_remove
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58001
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348545
Bugzilla Description: kernel: ocfs2: handle a symlink read error correctly
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-54458
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348546
Bugzilla Description: kernel: scsi: ufs: bsg: Set bsg_queue to NULL after removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58014
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348547
Bugzilla Description: kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21754
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348548
Bugzilla Description: kernel: btrfs: fix assertion failure when splitting ordered extent after transaction abort
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21709
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348549
Bugzilla Description: kernel: kernel: be more careful about dup_mmap() failures and uprobe registering
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57988
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348550
Bugzilla Description: kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21733
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348551
Bugzilla Description: kernel: tracing/osnoise: Fix resetting of tracepoints
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21711
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348552
Bugzilla Description: kernel: net/rose: prevent integer overflows in rose_setsockopt()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21767
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348553
Bugzilla Description: kernel: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21714
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348554
Bugzilla Description: kernel: RDMA/mlx5: Fix implicit ODP use after free
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21792
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348555
Bugzilla Description: kernel: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-401
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-49570
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348556
Bugzilla Description: kernel: drm/xe/tracing: Fix a potential TP_printk UAF
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57997
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348557
Bugzilla Description: kernel: wifi: wcn36xx: fix channel survey memory allocation size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58010
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348558
Bugzilla Description: kernel: binfmt_flat: Fix integer overflow bug on 32 bit systems
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58018
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348559
Bugzilla Description: kernel: nvkm: correctly calculate the available space of the GSP cmdq buffer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21725
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348560
Bugzilla Description: kernel: smb: client: fix oops due to unset link speed
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58004
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348561
Bugzilla Description: kernel: media: intel/ipu6: remove cpu latency qos request on error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57979
Severity: moderate
Released on: 27/02/2025
Advisory: RHSA-2025:2474, RHSA-2025:2473,
Bugzilla: 2348562
Bugzilla Description: kernel: pps: Fix a use-after-free
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE:
Affected Packages: kernel-rt-0:4.18.0-553.44.1.rt7.385.el8_10,kernel-0:4.18.0-553.44.1.el8_10,
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21721
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348563
Bugzilla Description: kernel: nilfs2: handle errors that nilfs_prepare_chunk() may return
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21706
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348564
Bugzilla Description: kernel: mptcp: pm: only set fullmesh for subflow endp
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58007
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348565
Bugzilla Description: kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57993
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348566
Bugzilla Description: kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21742
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348567
Bugzilla Description: kernel: usbnet: ipheth: use static NDP16 location in URB
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21713
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348568
Bugzilla Description: kernel: powerpc/pseries/iommu: Don't unset window if it was never set
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21734
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348569
Bugzilla Description: kernel: misc: fastrpc: Fix copy buffer page size
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21719
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348570
Bugzilla Description: kernel: ipmr: do not call mr_mfc_uses_dev() for unres entries
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21755
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348571
Bugzilla Description: kernel: vsock: Orphan socket after transport release
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21743
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348572
Bugzilla Description: kernel: usbnet: ipheth: fix possible overflow in DPE length check
CVSS Score:
CVSSv3 Score: 6.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21729
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348573
Bugzilla Description: kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57989
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348574
Bugzilla Description: kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21764
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348575
Bugzilla Description: kernel: ndisc: use RCU protection in ndisc_alloc_skb()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21749
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348576
Bugzilla Description: kernel: net: rose: lock the socket in rose_bind()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-667
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58015
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348577
Bugzilla Description: kernel: wifi: ath12k: Fix for out-of bound access error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57998
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348578
Bugzilla Description: kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21748
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348579
Bugzilla Description: kernel: ksmbd: fix integer overflows on 32 bit systems
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21780
Severity: important
Released on: 27/02/2025
Advisory:
Bugzilla: 2348580
Bugzilla Description: kernel: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57995
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348581
Bugzilla Description: kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21716
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348582
Bugzilla Description: kernel: vxlan: Fix uninit-value in vxlan_vnifilter_dump()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58011
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348583
Bugzilla Description: kernel: platform/x86: int3472: Check for adev == NULL
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21796
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348584
Bugzilla Description: kernel: nfsd: clear acl_access/acl_default after releasing them
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21739
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348585
Bugzilla Description: kernel: scsi: ufs: core: Fix use-after free in init error and remove paths
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57975
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348586
Bugzilla Description: kernel: btrfs: do proper folio cleanup when run_delalloc_nocow() failed
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21786
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348587
Bugzilla Description: kernel: workqueue: Put the pwq after detaching the rescuer from the pool
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21717
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348588
Bugzilla Description: kernel: net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58003
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348589
Bugzilla Description: kernel: media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58005
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348590
Bugzilla Description: kernel: tpm: Change to kvalloc() in eventlog/acpi.c
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57996
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348591
Bugzilla Description: kernel: net_sched: sch_sfq: don't allow 1 packet limit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-129
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58013
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348592
Bugzilla Description: kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21777
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348593
Bugzilla Description: kernel: ring-buffer: Validate the persistent meta data subbuf array
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21793
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348594
Bugzilla Description: kernel: spi: sn-f-ospi: Fix division by zero
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21738
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348595
Bugzilla Description: kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21759
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348596
Bugzilla Description: kernel: ipv6: mcast: extend RCU protection in igmp6_send()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57986
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348597
Bugzilla Description: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21794
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348598
Bugzilla Description: kernel: HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57980
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348599
Bugzilla Description: kernel: media: uvcvideo: Fix double free in error path
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-415
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21726
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348600
Bugzilla Description: kernel: padata: avoid UAF for reorder_work
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21791
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348601
Bugzilla Description: kernel: vrf: use RCU protection in l3mdev_l3_out()
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58020
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348602
Bugzilla Description: kernel: HID: multitouch: Add NULL check in mt_input_configured
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57984
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348603
Bugzilla Description: kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-52557
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348604
Bugzilla Description: kernel: drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-57973
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348605
Bugzilla Description: kernel: rdma/cxgb4: Prevent potential integer overflow on 32bit
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21723
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348606
Bugzilla Description: kernel: scsi: mpi3mr: Fix possible crash when setting up bsg fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21710
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348607
Bugzilla Description: kernel: tcp: correct handling of extreme memory squeeze
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2024-58008
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348608
Bugzilla Description: kernel: KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21756
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348609
Bugzilla Description: kernel: vsock: Keep the binding until socket destruction
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21769
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348610
Bugzilla Description: kernel: ptp: vmclock: Add .owner to vmclock_miscdev_fops
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-99
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21788
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348611
Bugzilla Description: kernel: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-401
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21761
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348612
Bugzilla Description: kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21779
Severity: low
Released on: 27/02/2025
Advisory:
Bugzilla: 2348613
Bugzilla Description: kernel: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21772
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348614
Bugzilla Description: kernel: partitions: mac: fix handling of bogus partition table
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2025-21787
Severity: moderate
Released on: 27/02/2025
Advisory:
Bugzilla: 2348615
Bugzilla Description: kernel: team: better TEAM_OPTION_TYPE_STRING validation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document