VulnSea

enterprise_linux vulnerabilities

CVEs whose affected-version data names the enterprise_linux package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

660 CVEsRSS

CVE-2026-89505Medium· 5.5
1w ago

kernel: RDMA/uverbs: Guard legacy bundles without method_elm (CVE-2026-89505)

A flaw was found in the Linux kernel's RDMA/uverbs component. Malformed input from a provider in the legacy write path can cause the `uverbs_get_handler_fn()` function to dereference an uninitialized pointer. This can lead to a system cras…

SunlitRed Hat · Red Hat Enterprise Linux 6EPSS 0.16%via CSAF
CVE-2026-89502Medium· 5.5
1w ago

kernel: ring-buffer: Free cpu_buffer::free_page with subbuf_order (CVE-2026-89502)

A flaw was found in the Linux kernel's ring-buffer component. When sub-buffers are configured with a specific memory allocation order greater than zero, the system attempts to free a memory page using an incorrect size. This memory managem…

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.20%via CSAF
CVE-2026-89661Medium· 5.5
1w ago

kernel: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem (CVE-2026-89661)

A flaw was found in the Linux kernel's Network File System Daemon (NFSD). A local administrator with CAP_SYS_ADMIN capabilities can trigger a use-after-free vulnerability by writing to /proc/fs/nfsd/unlock_filesystem after the NFSD server …

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.19%via CSAF
CVE-2026-89578Medium· 5.5
1w ago

kernel: dm-io: clone the source bio instead of copying its biovec (CVE-2026-89578)

A flaw was found in the Linux kernel's device mapper I/O (dm-io) component. When handling DM_IO_BIO requests, incorrect sector-based accounting for misaligned direct I/O buffers could lead to an infinite loop. This issue can cause I/O oper…

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.20%via CSAF
CVE-2026-89567Medium· 5.5
1w ago

kernel: jbd2: bound shrinker scans by examined checkpoint buffers (CVE-2026-89567)

A flaw was found in the Linux kernel's jbd2 shrinker. This component, which manages journal buffers, does not correctly account for busy checkpoint buffers. This oversight can cause the shrinker to hold a critical system lock for an extend…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.20%via CSAF
CVE-2026-89531High· 7.0
1w ago

kernel: svcrdma: Reject connection when transport allocation fails (CVE-2026-89531)

A flaw was found in the Linux kernel's svcrdma module. A remote attacker can exploit this vulnerability by repeatedly attempting connections when the system is under memory pressure. This can lead to a resource leak of `rdma_cm_id` objects…

TwilightRed Hat · Red Hat Enterprise Linux 9EPSS 0.17%via CSAF
CVE-2026-89529High· 7.0
1w ago

kernel: svcrdma: Reject oversized Read segments at decode time (CVE-2026-89529)

A flaw was found in the Linux kernel's svcrdma component, which handles Remote Procedure Call over Remote Direct Memory Access (RPC/RDMA) Read operations. This vulnerability occurs because the Read list decoder does not properly validate t…

TwilightRed Hat · Red Hat Enterprise Linux 10EPSS 0.19%via CSAF
CVE-2026-89527Medium· 5.5
1w ago

kernel: svcrdma: Use svc_xprt_put to free listener on create failure (CVE-2026-89527)

A flaw was found in the Linux kernel's svcrdma module. This vulnerability occurs when a listener creation fails, leading to an improper release of a network namespace reference. This resource leak can be exploited by a local attacker, pote…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.20%via CSAF
CVE-2026-89739High· 7.0
1w ago

kernel: usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (CVE-2026-89739)

A flaw was found in the Linux kernel's USB dwc3 gadget driver. A race condition exists where a delayed operation might try to access memory that has already been freed. This can lead to a use-after-free vulnerability, which a local attacke…

TwilightRed Hat · Red Hat Enterprise Linux 9EPSS 0.20%via CSAF
CVE-2026-89737High· 7.0
1w ago

kernel: usb: typec: thunderbolt: Disable work before freeing tbt on remove (CVE-2026-89737)

A flaw was found in the Linux kernel's USB Type-C Thunderbolt driver. The `tbt_altmode_remove()` function fails to properly disable and drain work items before freeing associated plug and cable references. This oversight can lead to a use-…

TwilightRed Hat · Red Hat Enterprise Linux 9EPSS 0.17%via CSAF
CVE-2026-89727High· 7.0
1w ago

kernel: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID (CVE-2026-89727)

A flaw was found in the Kernel-based Virtual Machine (KVM) for ARM64 (arm64) architecture. A malicious guest operating system can provide an interrupt ID (INTID) that is outside the expected range to the GICv2 (Generic Interrupt Controller…

TwilightRed Hat · Red Hat Enterprise Linux 10EPSS 0.15%via CSAF
CVE-2026-89701Medium· 5.5
1w ago

kernel: nfsd: validate nseconds in TIME_DELEG decode paths (CVE-2026-89701)

A flaw was found in the Linux kernel's Network File System Daemon (nfsd). The TIME_DELEG_ACCESS and TIME_DELEG_MODIFY decode paths do not properly validate the nanosecond (nseconds) value in timestamps. This allows a remote attacker to pro…

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.17%via CSAF
CVE-2026-89683High· 7.0
1w ago

kernel: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (CVE-2026-89683)

A flaw was found in the Linux kernel's nfsd (NFS daemon). A remote attacker could exploit this vulnerability by sending a specially crafted NFSv3 filehandle targeting a V4ROOT export's file system identifier (fsid). This action triggers a …

TwilightRed Hat · Red Hat Enterprise Linux 10EPSS 0.18%via CSAF
CVE-2026-89666High· 7.0
1w ago

kernel: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops (CVE-2026-89666)

A flaw was found in the kernel. A remote attacker, acting as an NFSv3 client, can send malformed time values during SETATTR or create operations. This can lead to the corruption of on-disk metadata, resulting in incorrect timestamps for fi…

TwilightRed Hat · Red Hat Enterprise Linux 9EPSS 0.17%via CSAF
CVE-2026-89645Medium· 5.5
1w ago

kernel: btrfs: drop recovered reloc root refs on recovery failure (CVE-2026-89645)

A flaw was found in the btrfs file system in the Linux kernel. During relocation recovery, if an error occurs, such as a memory allocation failure, the system may not properly drop references to relocation roots. This oversight can lead to…

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.22%via CSAF
CVE-2026-89629Medium· 5.5
1w ago

kernel: HID: corsair-void: Check size of status and firmware events before reading them (CVE-2026-89629)

A flaw was found in the Linux kernel, specifically within the `corsair-void` driver for Human Interface Devices (HID). This vulnerability allows an attacker to cause an out-of-bounds read by sending malformed status and firmware events. Th…

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.20%via CSAF
CVE-2026-89768Medium· 5.5
1w ago

kernel: fs: fix user path of nested backing files (CVE-2026-89768)

A flaw was found in the Linux kernel's filesystem (fs) component. When using nested overlay filesystems (overlayfs), a local user could exploit an issue where the backing_file_open() function incorrectly derives the path for mapped files. …

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.19%via CSAF
CVE-2026-89766High· 7.0
1w ago

kernel: pidfd: hold exec_update_lock around namespace ioctl (CVE-2026-89766)

A flaw was found in the Linux kernel. A local attacker could exploit a race condition in the `pidfd` subsystem, specifically within the `PIDFD_GET_*_NAMESPACE` ioctls. This vulnerability occurs because the system does not properly hold a l…

TwilightRed Hat · Red Hat Enterprise Linux 9EPSS 0.18%via CSAF
CVE-2026-89759Medium· 5.5
1w ago

kernel: mm/kmemleak: avoid soft lockup when scanning task stacks (CVE-2026-89759)

A flaw was found in the Linux kernel's memory leak detector (kmemleak). When kmemleak_scan() attempts to scan task stacks on systems with a large number of threads, it can hold a CPU for an extended period without allowing other processes …

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.19%via CSAF
CVE-2026-89757Medium· 5.5
1w ago

kernel: mm/mglru: fix and remove redundant unevictable folio handling (CVE-2026-89757)

A flaw was found in the Linux kernel's memory management unit (MMU), specifically within the multi-generational Least Recently Used (mglru) mechanism. A bug in how the kernel handles unevictable memory pages can lead to these pages remaini…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.18%via CSAF
CVE-2026-89745High· 7.0
1w ago

kernel: debugfs: Fix lockdown check for mmap_prepare (CVE-2026-89745)

A flaw was found in the Linux kernel's debugfs component. The lockdown mechanism, designed to enhance system integrity, did not properly account for files using the `mmap_prepare` operation. This oversight could allow an attacker to bypass…

TwilightRed Hat · Red Hat Enterprise Linux 6EPSS 0.15%via CSAF
CVE-2026-89740Medium· 5.5
1w ago

kernel: serial: imx: serialize imx_uart_ports[] lifetime (CVE-2026-89740)

A flaw was found in the Linux kernel's `serial: imx` component. The `imx_uart_probe()` function publishes a device-managed allocated port in the `imx_uart_ports[]` array before it is fully added. If the port addition fails or the port is r…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.20%via CSAF
CVE-2026-78807High· 7.1
1w ago

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c

TwilightRed Hat · Red Hat Enterprise Linux 6EPSS 0.08%via NVD
CVE-2026-89092Medium· 4.2
1w ago

glibc: nscd stack overflow leads to degraded DNS resolution (CVE-2026-89092)

A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System (DNS) server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, ca…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.24%via CSAF
CVE-2026-80940Medium· 5.5
1w ago

kernel: wifi: rtw88: pci: fix resource leak on failed NAPI setup (CVE-2026-80940)

A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI (Networked Attached Peripheral Interface) setup fails, allocated PCI resources are not properly released. This resource leak could potentially l…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.17%via CSAF
CVE-2026-80927Medium· 5.5
1w ago

kernel: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() (CVE-2026-80927)

A flaw was found in the Linux kernel. A race condition in the timekeeping subsystem, specifically within the __do_adjtimex() function, can occur when the auxiliary clock is handled. This allows uninitialized stack data to be used in calcul…

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.17%via CSAF
CVE-2026-89455Medium· 5.5
1w ago

kernel: PCI: plda: Fix use-after-free of event IRQs during teardown (CVE-2026-89455)

A flaw was found in the Linux kernel's PCI PLDA driver. During the teardown of Interrupt Request (IRQ) domains, the system can attempt to access memory that has already been freed. This 'use-after-free' vulnerability occurs because the dom…

SunlitRed Hat · Red Hat Enterprise Linux 10EPSS 0.20%via CSAF
CVE-2026-89451Medium· 5.5
1w ago

kernel: iommu/sva: Set handle->dev before the SVA handle is visible (CVE-2026-89451)

A flaw was found in the Linux kernel's IOMMU (Input/Output Memory Management Unit) SVA (Shared Virtual Addressing) component. A race condition during the attachment of an SVA handle can lead to a situation where a device pointer is not pro…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.20%via CSAF
CVE-2026-89449Medium· 5.5
1w ago

kernel: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add (CVE-2026-89449)

A flaw was found in the Linux kernel's Input-Output Memory Management Unit (IOMMU) subsystem. When a device addition fails during the `iommu_mock_device_add()` operation, the allocated device IOMMU structure is not properly deallocated. Th…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.17%via CSAF
CVE-2026-89446Medium· 5.5
1w ago

kernel: iommufd: Release current IOAS on xa_store() failure (CVE-2026-89446)

A flaw was found in the Linux kernel's iommufd component. When the system attempts to store an Input/Output Address Space (IOAS) object and the storage operation fails, the IOAS object's associated resources, such as its write lock and obj…

SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.20%via CSAF
enterprise_linux vulnerabilities (CVEs) — page 8 · VulnSea