EL
Product
Enterprise Linux
by Redhat · last CVE Oct 6, 2026
On CISA KEVExploited in the wildRansomware-linked
1,952
CVEs
26
On KEV
9.9
Max CVSS
16
New 30D
Severity mix
Critical 151High 348Medium 1Low 0
Watch

Add Enterprise Linux to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5367
7.8
1%
Oct 25
A out-of-bounds write flaw was found in the xorg-x11-server
Affected: 7.0; 8.0; 9.0
CVE-2023-4692
7.8
1%
Oct 25
An out-of-bounds write flaw was found in grub2's NTFS filesystem driver
Affected: 8.0; 9.0
CVE-2023-5633
7.8
0%
Oct 23
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being…
Affected: 8.0; 9.0
CVE-2023-43787
7.8
0%
Oct 10
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function
Affected: 8.0; 9.0
CVE-2023-42753
7.8
1%
Sep 25
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Affected: 7.0; 8.0; 9.0
CVE-2023-3899
7.8
0%
Aug 23
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization
Affected: 8.0; 9.0
CVE-2023-4147
7.8
1%
Aug 7
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID
Affected: 9.0
CVE-2023-4004
7.8
1%
Jul 31
Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
Affected: 8.0; 9.0
CVE-2023-3812
7.8
0%
Jul 24
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi…
Affected: 8.0; 9.0
CVE-2023-3640
7.8
1%
Jul 24
A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception…
Affected: 8.0; 9.0
CVE-2023-3269
7.8
1%
Jul 11
A vulnerability exists in the memory management subsystem of the Linux kernel
Affected: 6.0; 7.0; 8.0; 9.0
CVE-2023-34432
7.8
0%
Jul 10
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16
Affected: 6.0; 7.0
CVE-2023-34318
7.8
0%
Jul 10
A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41
Affected: 6.0; 7.0
CVE-2023-2603
7.8
1%
Jun 6
A vulnerability was found in libcap
Affected: 8.0; 9.0
CVE-2023-34153
7.8
3%
May 30
A vulnerability was found in ImageMagick
Affected: 6.0; 7.0
CVE-2023-2491
7.8
0%
May 17
A flaw was found in the Emacs text editor
Affected: 8.0; 9.0
CVE-2023-32233
7.8
13%
May 8
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel…
Affected: 7.0; 8.0; 9.0
CVE-2023-30549
7.8
0%
Apr 25
Apptainer is an open source container platform for Linux
Affected: 7.0
CVE-2022-3787
7.8
0%
Mar 29
A vulnerability was found in the device-mapper-multipath
Affected: 8.7; 9.1
CVE-2023-0664
7.8
0%
Mar 29
A flaw was found in the QEMU Guest Agent service for Windows
Affected: 7.0; 8.0; 9.0
CVE-2023-0179
7.8
2%
Mar 27
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel
Affected: 9.0
CVE-2023-0494
7.8
1%
Mar 27
A vulnerability was found in X.Org
Affected: 8.0; 8.1; 9.0
CVE-2022-3424
7.8
0%
Mar 6
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the…
Affected: 9.0
CVE-2022-3715
7.8
0%
Jan 5
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform
Affected: 9.0
CVE-2022-4283
7.8
1%
Dec 14
A vulnerability was found in X.Org
Affected: 6.0; 7.0; 8.0; 9.0
CVE-2022-2964
7.8
0%
Sep 9
A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices
Affected: 7.0; 8.0; 9.0
CVE-2022-25308
7.8
1%
Sep 6
A stack-based buffer overflow flaw was found in the Fribidi package
Affected: 8.0; 9.0
CVE-2022-2639
7.8
1%
Sep 1
An integer coercion error was found in the openvswitch kernel module
Affected: 8.0; 9.0
CVE-2022-0358
7.8
0%
Aug 29
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation
Affected: 8.0
CVE-2022-0135
7.8
0%
Aug 25
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer)
Affected: 8.0
CVE-2022-2938
7.8
0%
Aug 23
A flaw was found in the Linux kernel's implementation of Pressure Stall Information
Affected: 8.0
CVE-2021-31566
7.8
0%
Aug 23
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive
Affected: 8.0
CVE-2021-23177
7.8
0%
Aug 23
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link
Affected: 8.0
CVE-2022-1158
7.8
0%
Aug 5
A flaw was found in KVM
Affected: 8.0; 9.0
CVE-2022-32547
7.8
1%
Jun 16
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at…
Affected: 6.0; 7.0
CVE-2022-32546
7.8
1%
Jun 16
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is…
Affected: 6.0; 7.0
CVE-2022-32545
7.8
1%
Jun 16
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is…
Affected: 7.0
CVE-2022-1998
7.8
0%
Jun 9
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user()
Affected: 9.0
CVE-2022-1652
7.8
1%
Jun 2
Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function
Affected: 9.0
CVE-2022-1304
7.8
1%
Apr 14
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5
Affected: 6.0; 7.0; 8.0
CVE-2022-1055
7.8
1%
Mar 29
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation
Affected: 8.0
CVE-2022-0330
7.8
0%
Mar 25
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU
Affected: 8.0
CVE-2022-27666
7.8
6%
Mar 23
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c
Affected: 8.0
CVE-2022-1011
7.8
1%
Mar 18
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write()
Affected: 6.0; 7.0; 8.0
CVE-2022-0516
7.8
0%
Mar 10
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel
Affected: 8.0
CVE-2021-3575
7.8
2%
Mar 4
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file
Affected: 6.0; 7.0; 8.0
CVE-2021-26252
7.8
1%
Feb 24
A flaw was found in htmldoc in v1.9.12
Affected: 7.0
CVE-2021-3551
7.8
0%
Feb 16
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file
Affected: 8.0
CVE-2021-45417
7.8
0%
Jan 20
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow
Affected: 6.0; 7.0; 8.0
CVE-2021-45463
7.8
2%
Dec 23
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered
Affected: 7.0; 8.0
Page 8 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)