CL
Product
Codeready Linux Builder
by Redhat · last CVE Apr 13, 2026
On CISA KEVExploited in the wild
44
CVEs
4
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 22Medium 22Low 0
Watch

Add Codeready Linux Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-8720
In wildKEV
8.8
2%
Mar 6
WebKitGTK Memory Corruption Vulnerability
Affected: 8.0
CVE-2023-4911
In wildKEV
7.8
64%
Oct 3
Glibc: buffer overflow in ld.so leading to privilege escalation
Affected: 9.0
CVE-2022-0847
In wildKEV
7.8
93%
Mar 7
Linux Kernel Privilege Escalation Vulnerability
Affected: All versions, or not specified
CVE-2022-0492
In wildKEV
7.8
6%
Mar 3
Linux Kernel Improper Authentication Vulnerability
Affected: 8.0; 8.2
CVE-2022-0435
8.8
68%
Mar 25
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes…
Affected: 8.0; 8.4
CVE-2021-3656
8.8
1%
Mar 4
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization
Affected: All versions, or not specified
CVE-2021-44142
8.8
74%
Feb 21
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP…
Affected: All versions, or not specified
CVE-2020-25717
8.1
2%
Feb 18
A flaw was found in the way Samba maps domain users to local users
Affected: All versions, or not specified
CVE-2026-4775
7.8
1%
Mar 24
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Affected: 8.0; 9.0; 10.0
CVE-2023-5633
7.8
0%
Oct 23
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being…
Affected: 8.0; 9.0
CVE-2023-0179
7.8
2%
Mar 27
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel
Affected: All versions, or not specified
CVE-2021-31566
7.8
0%
Aug 23
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive
Affected: All versions, or not specified
CVE-2021-23177
7.8
0%
Aug 23
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link
Affected: All versions, or not specified
CVE-2022-0330
7.8
0%
Mar 25
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU
Affected: 8.0; 8.4
CVE-2022-1011
7.8
1%
Mar 18
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write()
Affected: All versions, or not specified
CVE-2022-0516
7.8
0%
Mar 10
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel
Affected: All versions, or not specified
CVE-2025-13601
7.7
0%
Nov 26
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function
Affected: 9.0
CVE-2021-3737
7.5
13%
Mar 4
A flaw was found in python
Affected: 8.0
CVE-2025-3155
7.4
13%
Apr 3
A flaw was found in Yelp
Affected: 8.0; 9.0
CVE-2024-1488
7.3
0%
Feb 15
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration
Affected: 9.0
CVE-2023-3758
7.1
1%
Apr 18
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users
Affected: 8.0
CVE-2021-3697
7.0
0%
Jul 6
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap
Affected: All versions, or not specified
CVE-2024-0193
6.7
1%
Jan 2
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel
Affected: 9.0
CVE-2026-39979
6.5
1%
Apr 13
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
Affected: 8.0; 9.0; 10.0
CVE-2025-2784
6.5
1%
Apr 3
A flaw was found in libsoup
Affected: 10.0
CVE-2023-5455
6.5
1%
Jan 10
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA
Affected: All versions, or not specified
CVE-2021-3975
6.5
2%
Aug 23
A use-after-free flaw was found in libvirt
Affected: All versions, or not specified
CVE-2021-20257
6.5
0%
Mar 16
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU
Affected: All versions, or not specified
CVE-2021-3733
6.5
5%
Mar 7
There's a flaw in urllib's AbstractBasicAuthHandler class
Affected: 8.0
CVE-2021-3930
6.5
0%
Feb 18
An off-by-one error was found in the SCSI device emulation in QEMU
Affected: 8.0
CVE-2020-14301
6.5
1%
May 27
An information disclosure vulnerability was found in libvirt in versions before 6.3.0
Affected: All versions, or not specified
CVE-2019-3460
6.5
2%
Apr 11
A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1
Affected: 8.0
CVE-2019-3459
6.5
2%
Apr 11
A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1
Affected: 8.0
CVE-2016-2124
5.9
2%
Feb 18
A flaw was found in the way samba implemented SMB1 authentication
Affected: All versions, or not specified
CVE-2023-6915
5.5
0%
Jan 15
A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel
Affected: 8.0; 9.0; 9.0
CVE-2023-4641
5.5
0%
Dec 27
A flaw was found in shadow-utils
Affected: 8.0; 9.0
CVE-2023-4042
5.5
0%
Aug 23
A flaw was found in ghostscript
Affected: 8.0
CVE-2021-3669
5.5
0%
Aug 26
A flaw was found in the Linux kernel
Affected: All versions, or not specified
CVE-2021-3659
5.5
0%
Aug 22
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection
Affected: All versions, or not specified
CVE-2021-3744
5.5
1%
Mar 4
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory…
Affected: 8.0
CVE-2020-27842
5.5
2%
Jan 5
There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0
Affected: 8.0
CVE-2023-4732
4.7
0%
Oct 3
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel
Affected: 8.0
CVE-2021-3696
4.5
0%
Jul 6
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader
Affected: All versions, or not specified
CVE-2021-3695
4.5
0%
Jul 6
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area
Affected: All versions, or not specified
Showing 44