Vulnerabilities of Red Hat Red Hat Enterprise Linux BaseOS TUS (v.8.8)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 High	May 4, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critical	May 1, 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 High	Apr 30, 2026
CVE-2026-31431	Exploited Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability	7.8 High	Apr 22, 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 High	Apr 16, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-31419	In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in…	7.8 High	Apr 13, 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Medium	Apr 9, 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 High	Apr 6, 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critical	Apr 3, 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 High	Apr 3, 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 High	Apr 2, 2026
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 High	Apr 1, 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 High	Mar 31, 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 High	Mar 25, 2026
CVE-2026-33412	Vim is an open source, command line text editor	5.6 Medium	Mar 24, 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 High	Mar 20, 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 High	Mar 19, 2026
CVE-2026-27135	nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C	7.5 High	Mar 18, 2026
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Low	Mar 12, 2026
CVE-2026-25646	LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…	8.3 High	Feb 10, 2026
CVE-2026-23074	In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as…	7.8 High	Feb 4, 2026
CVE-2026-1761	Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response	8.6 High	Feb 2, 2026

Other Red Hat products