Red Hat Enterprise Linux For Real Time Tus vulnerabilities

21 CVEs affecting Red Hat Enterprise Linux For Real Time Tus, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3669, published 2022-08-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability, published 2022-03-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-04-25. EPSS: 92.8% chance of exploitation in the next 30 days. A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus…
CVE-2019-13272: Linux Kernel Improper Privilege Management Vulnerability, published 2019-07-17. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 52.2% chance of exploitation in the next 30 days. In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to…
CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability, published 2022-03-03. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-06-02. EPSS: 5.5% chance of exploitation in the next 30 days. A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1…
CVE-2022-0435, published 2022-03-25. High severity, CVSS 8.8. EPSS: 67.8% chance of exploitation in the next 30 days. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64…
CVE-2019-10126, published 2019-06-14. Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly…
CVE-2019-3460, published 2019-04-11. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.
CVE-2019-3459, published 2019-04-11. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
CVE-2022-1011, published 2022-03-18. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem,…
CVE-2019-14816, published 2019-09-20. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash)…
CVE-2019-14814, published 2019-09-20. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system…

Latest

CVE-2021-3669, published 2022-08-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.
CVE-2021-3659, published 2022-08-22. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash…
CVE-2022-0330, published 2022-03-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system…
CVE-2021-3656, published 2022-03-04. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a…
CVE-2021-3609, published 2022-03-03. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This…
CVE-2021-3501, published 2021-05-06. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could…