Red Hat Red Hat Enterprise Linux 9

• CVE-2025-61663 Medium 4.9 Grub2: missing unregister call for normal commands may lead to use-after-free 0.1%
• CVE-2025-61662 High 7.8 Grub2: missing unregister call for gettext command may lead to use-after-free 0.2%
• CVE-2025-61661 Medium 4.8 Grub2: grub2: out-of-bounds write via malicious usb device 0.2%
• CVE-2025-54771 Medium 4.9 Grub2: use-after-free in grub_file_close() 0.2%
• CVE-2025-13193 Medium 5.5 Libvirt: information disclosure via world-readable vm snapshots 0.1%
• CVE-2025-59089 Medium 5.9 Python-kdcproxy: remote dos via unbounded tcp upstream buffering 0.6%
• CVE-2025-59088 High 8.6 Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv 0.5%
• CVE-2025-12748 Medium 5.5 Libvirt: denial of service in xml parsing 0.2%
• CVE-2025-10230 Critical 10.0 Samba: command injection in wins server hook script 39.8%
• CVE-2025-12464 Medium 6.2 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode 0.2%
• CVE-2025-62229 High 7.3 Xorg: xmayland: use-after-free in xpresentnotify structure creation 0.5%
• CVE-2025-62230 High 7.3 Xorg: xwayland: use-after-free in xkb client resource removal 0.3%
• CVE-2025-62231 High 7.3 Xorg: xmayland: value overflow in xkbsetcompatmap() 0.3%
• CVE-2025-12105 High 7.5 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 0.5%
• CVE-2025-11568 Medium 4.4 Luksmeta: data corruption when handling luks1 partitions with luksmeta 0.1%
• CVE-2025-9640 Medium 4.3 Samba: vfs_streams_xattr uninitialized memory write possible 0.5%
• CVE-2025-11731 Low 3.1 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 0.3%
• CVE-2025-11561 High 8.8 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 0.8%
• CVE-2025-11234 High 7.5 Qemu-kvm: vnc websocket handshake use-after-free 0.9%
• CVE-2025-7493 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 0.6%
• CVE-2025-11021 High 7.5 Libsoup: out-of-bounds read in cookie date handling of libsoup http library 0.6%
• CVE-2025-60019 Low 3.7 Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() 0.4%
• CVE-2025-60018 Medium 4.8 Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" 0.3%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-9900 High 8.8 Libtiff: libtiff write-what-where 1.0%
• CVE-2025-5962 High 7.7 Rhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulation 0.2%
• CVE-2025-4953 High 7.4 Podman: build context bind mount 0.6%
• CVE-2025-8277 Low 3.1 Libssh: memory exhaustion via repeated key exchange in libssh 0.4%
• CVE-2025-9566 High 8.1 Podman: podman kube play command may overwrite host files 1.2%
• CVE-2025-9901 Medium 5.9 Libsoup: improper handling of http vary header in libsoup caching 0.5%
• CVE-2025-7039 Low 3.7 Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file() 0.4%
• CVE-2025-9784 High 7.5 Undertow: undertow madeyoureset http/2 ddos vulnerability 2.3%
• CVE-2025-8067 High 8.5 Udisks: out-of-bounds read in udisks daemon 0.7%
• CVE-2025-4877 Medium 4.5 Libssh: write beyond bounds in binary to base64 conversion functions 0.2%
• CVE-2023-5342 Medium 4.1 Shim: expired secure boot certificate <0.1%
• CVE-2025-8941 High 7.8 Linux-pam: incomplete fix for cve-2025-6020 0.3%
• CVE-2023-32253 Medium 5.9 Kernel: deadlock in ksmbd_find_crypto_ctx() 0.3%
• CVE-2023-32255 Medium 5.3 Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type 0.6%
• CVE-2023-32256 High 7.5 Kernel: ksmbd race issue from smb2 close and logoff with multichannel 0.6%
• CVE-2023-32251 Low 3.7 Kernel: ksmbd brute force delay bypass via asynchronous requests 0.5%
• CVE-2023-2593 Medium 5.9 Kernel: ksmbd memory exhaustion denial-of-service vulnerability 0.8%
• CVE-2025-8283 Low 3.7 Netavark: podman: netavark may resolve hostnames to unexpected hosts 0.4%
• CVE-2025-4056 High 7.5 Glib: glib crash after long command line 0.5%
• CVE-2025-5449 Medium 6.5 Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service 1.0%
• CVE-2025-8114 Medium 4.7 Libssh: null pointer dereference in libssh kex session id calculation 0.3%
• CVE-2025-6018 High 7.8 Pam-config: lpe from unprivileged to allow_active in pam 1.1%
• CVE-2025-4878 Low 3.6 Libssh: use of uninitialized variable in privatekey_from_file() 0.2%
• CVE-2025-7519 Medium 6.7 Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write 0.2%
• CVE-2025-6395 Medium 6.5 Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 0.8%
• CVE-2025-7424 High 7.5 Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes 1.3%