Vulnérabilités de Red Hat Red Hat Enterprise Linux BaseOS EUS (v. 10.0)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critique	6 mai 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 Élevée	4 mai 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critique	1 mai 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critique	1 mai 2026
CVE-2026-31709	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before…	8.8 Élevée	1 mai 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 Élevée	30 avr. 2026
CVE-2026-31607	In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in…	9.8 Critique	24 avr. 2026
CVE-2026-31474	In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in…	7.8 Élevée	22 avr. 2026
CVE-2026-31431	Exploitée Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability	7.8 Élevée	22 avr. 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 Élevée	16 avr. 2026
CVE-2026-40164	jq is a command-line JSON processor	7.5 Élevée	13 avr. 2026
CVE-2026-39979	jq is a command-line JSON processor	6.9 Moyenne	13 avr. 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 Élevée	13 avr. 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critique	13 avr. 2026
CVE-2026-31419	In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in…	7.8 Élevée	13 avr. 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Moyenne	9 avr. 2026
CVE-2026-4631	Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection	9.8 Critique	7 avr. 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 Élevée	6 avr. 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critique	3 avr. 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 Élevée	3 avr. 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 Élevée	2 avr. 2026
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 Élevée	1 avr. 2026
CVE-2026-3608	Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any…	7.5 Élevée	25 mars 2026
CVE-2026-33412	Vim is an open source, command line text editor	5.6 Moyenne	24 mars 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 Élevée	20 mars 2026

Autres produits Red Hat