Known vulnerabilities in Red Hat Enterprise Linux 9
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-5342 | The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid… | 4.1 Medium | Aug 15, 2025 |
| CVE-2025-8941 | A flaw was found in linux-pam | 7.8 High | Aug 13, 2025 |
| CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 Low | Aug 6, 2025 |
| CVE-2023-32253 | A flaw was found in the Linux kernel's ksmbd component | 5.9 Medium | Aug 2, 2025 |
| CVE-2023-32255 | A flaw was found in the Linux kernel's ksmbd component | 5.3 Medium | Aug 2, 2025 |
| CVE-2023-32256 | Kernel: ksmbd race issue from smb2 close and logoff with multichannel | 7.5 High | Aug 1, 2025 |
| CVE-2023-32251 | A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server) | 3.7 Low | Jul 31, 2025 |
| CVE-2023-2593 | A flaw exists within the Linux kernel's handling of new TCP connections | 5.9 Medium | Jul 30, 2025 |
| CVE-2025-43214 | The issue was addressed with improved memory handling | 6.5 Medium | Jul 29, 2025 |
| CVE-2025-31277 | Exploited Apple Multiple Products Buffer Overflow Vulnerability | 8.8 High | Jul 29, 2025 |
| CVE-2025-43213 | The issue was addressed with improved memory handling | 6.5 Medium | Jul 29, 2025 |
| CVE-2025-8283 | Netavark: podman: netavark may resolve hostnames to unexpected hosts | 3.7 Low | Jul 28, 2025 |
| CVE-2025-4056 | Glib: glib crash after long command line | 7.5 High | Jul 28, 2025 |
| CVE-2025-5449 | Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service | 6.5 Medium | Jul 25, 2025 |
| CVE-2025-8114 | Libssh: null pointer dereference in libssh kex session id calculation | 4.7 Medium | Jul 24, 2025 |
| CVE-2025-6018 | Pam-config: lpe from unprivileged to allow_active in pam | 7.8 High | Jul 23, 2025 |
| CVE-2025-4878 | Libssh: use of uninitialized variable in privatekey_from_file() | 3.6 Low | Jul 22, 2025 |
| CVE-2025-7519 | Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write | 6.7 Medium | Jul 14, 2025 |
| CVE-2025-6395 | Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() | 6.5 Medium | Jul 10, 2025 |
| CVE-2025-7424 | Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes | 7.5 High | Jul 10, 2025 |
| CVE-2025-7425 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr | 7.8 High | Jul 10, 2025 |
| CVE-2025-32990 | Gnutls: vulnerability in gnutls certtool template parsing | 6.5 Medium | Jul 10, 2025 |
| CVE-2025-32989 | Gnutls: vulnerability in gnutls sct extension parsing | 5.3 Medium | Jul 10, 2025 |
| CVE-2025-32988 | Gnutls: vulnerability in gnutls othername san export | 6.5 Medium | Jul 10, 2025 |
| CVE-2025-7345 | Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf | 7.5 High | Jul 8, 2025 |
Other Red Hat products
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430