RedHat Codeready Linux Builder For Arm64 vulnerabilities

13 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Exploited RedHat Codeready Linux Builder For Arm64 vulnerabilities

CVE-2025-13601 — Glib: integer overflow in in g_escape_uri_string() (CVSS 7.7)
CVE-2025-3155 — Yelp: arbitrary file read (CVSS 7.4)
CVE-2025-2784 — Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content (CVSS 6.5)
CVE-2023-3758 — Sssd: race condition during authorization leads to gpo policies functioning inconsistently (CVSS 7.1)
CVE-2024-1488 — Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation (CVSS 7.3)
CVE-2023-6915 — Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c (CVSS 5.5)
CVE-2023-4641 — Shadow-utils: possible password leak during passwd(1) change (CVSS 5.5)
CVE-2023-5633 — Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVSS 7.8)
CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability (CVSS 7.8) — exploited
CVE-2023-4732 — Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h (CVSS 4.7)
CVE-2023-4806 — Glibc: potential use-after-free in getaddrinfo() (CVSS 5.9)
CVE-2023-4527 — Glibc: stack read overflow in getaddrinfo in no-aaaa mode (CVSS 6.5)
CVE-2023-4042 — Ghostscript: incomplete fix for cve-2020-16305 (CVSS 5.5)