Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-12464	Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode	6.2 Medium	Oct 31, 2025
CVE-2025-62229	Xorg: xmayland: use-after-free in xpresentnotify structure creation	7.3 High	Oct 30, 2025
CVE-2025-62230	Xorg: xwayland: use-after-free in xkb client resource removal	7.3 High	Oct 30, 2025
CVE-2025-62231	Xorg: xmayland: value overflow in xkbsetcompatmap()	7.3 High	Oct 30, 2025
CVE-2025-12105	Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion	7.5 High	Oct 23, 2025
CVE-2025-11568	Luksmeta: data corruption when handling luks1 partitions with luksmeta	4.4 Medium	Oct 15, 2025
CVE-2025-9640	Samba: vfs_streams_xattr uninitialized memory write possible	4.3 Medium	Oct 15, 2025
CVE-2025-11731	Libxslt: type confusion in exsltfuncresultcompfunction of libxslt	3.1 Low	Oct 14, 2025
CVE-2025-11561	Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems	8.8 High	Oct 9, 2025
CVE-2025-11234	Qemu-kvm: vnc websocket handshake use-after-free	7.5 High	Oct 3, 2025
CVE-2025-7493	A privilege escalation flaw from host to domain administrator was found in FreeIPA	9.1 Critical	Sep 30, 2025
CVE-2025-11021	Libsoup: out-of-bounds read in cookie date handling of libsoup http library	7.5 High	Sep 26, 2025
CVE-2025-60019	Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()	3.7 Low	Sep 25, 2025
CVE-2025-60018	Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"	4.8 Medium	Sep 25, 2025
CVE-2025-10911	Libxslt: use-after-free with key data stored cross-rvt	5.5 Medium	Sep 25, 2025
CVE-2025-9900	Libtiff: libtiff write-what-where	8.8 High	Sep 23, 2025
CVE-2025-5962	A flaw was found in the Lightspeed history service	7.7 High	Sep 22, 2025
CVE-2025-4953	Podman: build context bind mount	7.4 High	Sep 16, 2025
CVE-2025-8277	Libssh: memory exhaustion via repeated key exchange in libssh	3.1 Low	Sep 9, 2025
CVE-2025-9566	There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the…	8.1 High	Sep 5, 2025
CVE-2025-9901	Libsoup: improper handling of http vary header in libsoup caching	5.9 Medium	Sep 3, 2025
CVE-2025-7039	A flaw was found in glib	3.7 Low	Sep 3, 2025
CVE-2025-9784	Undertow: undertow madeyoureset http/2 ddos vulnerability	7.5 High	Sep 2, 2025
CVE-2025-8067	Udisks: out-of-bounds read in udisks daemon	8.5 High	Aug 28, 2025
CVE-2025-4877	Libssh: write beyond bounds in binary to base64 conversion functions	4.5 Medium	Aug 20, 2025

Other Red Hat products