Vulnerabilities of Red Hat Red Hat Enterprise Linux BaseOS (v. 8)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-5946	Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet…	7.5 High	May 20, 2026
CVE-2026-3039	BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive…	7.5 High	May 20, 2026
CVE-2026-29518	Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling…	7.3 High	May 20, 2026
CVE-2026-43618	Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit…	6.1 Medium	May 20, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2026-46333	In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The…	7.1 High	May 15, 2026
CVE-2026-4802	Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui	8.0 High	May 11, 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Low	May 10, 2026
CVE-2026-43329	In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum…	7.8 High	May 8, 2026
CVE-2026-43284	In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb…	8.8 High	May 8, 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 High	May 7, 2026
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critical	May 6, 2026
CVE-2026-43125	In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The…	9.8 Critical	May 6, 2026
CVE-2026-43112	In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in…	8.8 High	May 6, 2026
CVE-2026-43964	Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash…	3.7 Low	May 4, 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 High	May 4, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critical	May 1, 2026
CVE-2026-31709	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before…	8.8 High	May 1, 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 High	Apr 30, 2026
CVE-2026-31488	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode…	7.8 High	Apr 22, 2026
CVE-2026-31431	Exploited Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability	7.8 High	Apr 22, 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 High	Apr 16, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026

Other Red Hat products