Oracle Linux vulnerabilities

230 CVEs affecting Oracle Linux, 8 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-35233, published 2026-05-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6271: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-24. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 100% chance of exploitation in the next 30 days. GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment,…
CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-25. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 99.9% chance of exploitation in the next 30 days. GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or…
CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability, published 2016-04-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 92.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2016-3718: ImageMagick Server-Side Request Forgery (SSRF) Vulnerability, published 2016-05-05. Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 75.7% chance of exploitation in the next 30 days. The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3715: ImageMagick Arbitrary File Deletion Vulnerability, published 2016-05-05. Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 75.3% chance of exploitation in the next 30 days. The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability, published 2014-06-07. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 37.2% chance of exploitation in the next 30 days. The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a…
CVE-2014-0196: Linux Kernel Race Condition Vulnerability, published 2014-05-07. Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 22.5% chance of exploitation in the next 30 days. The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial…
CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability, published 2015-12-07. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-08-26. EPSS: 5% chance of exploitation in the next 30 days. The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable…
CVE-2013-5211, published 2014-01-02. Medium severity, CVSS 5.0. EPSS: 97.5% chance of exploitation in the next 30 days. The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2)…
CVE-2015-0235, published 2015-01-28. High severity, CVSS 10.0. EPSS: 94.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors…

Latest

CVE-2026-35233, published 2026-05-01. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via…
CVE-2026-21996, published 2026-05-01. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()
CVE-2026-21991, published 2026-03-16. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.
CVE-2025-4598, published 2025-05-30. Medium severity, CVSS 4.7. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process…
CVE-2022-21505, published 2024-12-24. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents…
CVE-2023-22024, published 2023-09-20. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A malicious local user with…
CVE-2022-21385, published 2022-08-29. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector…
CVE-2022-21504, published 2022-06-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a socket to be closed and freed while it was…
CVE-2022-21499, published 2022-06-09. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that…
CVE-2021-3551, published 2022-02-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file…