Red Hat Enterprise Linux Long Life vulnerabilities

3 CVEs affecting Red Hat Enterprise Linux Long Life, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5195, published 2016-11-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5195: Linux Kernel Race Condition Vulnerability, published 2016-11-10. High severity, CVSS 7.0. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 83.5% chance of exploitation in the next 30 days. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a…
CVE-2012-6137, published 2013-05-21. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which…
CVE-2012-2313, published 2012-06-13. Low severity, CVSS 1.2. EPSS: 0.6% chance of exploitation in the next 30 days. The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet…