Known vulnerabilities in Red Hat Enterprise Linux BaseOS (v. 9)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-45898	In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing…	9.8 Critical	May 27, 2026
CVE-2026-45852	In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In…	7.8 High	May 27, 2026
CVE-2026-3012	Samba: group policy certificate enrollment uses http:// without validation	8.0 High	May 27, 2026
CVE-2026-4480	Samba: samba: remote code execution in printing subsystem via unescaped job description	9.0 Critical	May 26, 2026
CVE-2026-46300	Exploited Linux Kernel Missing Initialization of a Variable Vulnerability	7.8 High	May 23, 2026
CVE-2026-43503	In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through…	8.8 High	May 23, 2026
CVE-2026-43501	In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when…	9.8 Critical	May 21, 2026
CVE-2026-29518	Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling…	7.3 High	May 20, 2026
CVE-2026-43618	Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit…	6.1 Medium	May 20, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2026-46333	In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The…	7.1 High	May 15, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-4802	Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui	8.0 High	May 11, 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Low	May 10, 2026
CVE-2026-43329	In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum…	7.8 High	May 8, 2026
CVE-2026-43284	In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb…	8.8 High	May 8, 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 High	May 7, 2026
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critical	May 6, 2026
CVE-2026-43125	In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The…	9.8 Critical	May 6, 2026
CVE-2026-43112	In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in…	8.8 High	May 6, 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 High	May 4, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critical	May 1, 2026
CVE-2026-31709	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before…	8.8 High	May 1, 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 High	Apr 30, 2026

Other Red Hat products