RedHat Codeready Linux Builder For Power Little Endian vulnerabilities

17 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Exploited RedHat Codeready Linux Builder For Power Little Endian vulnerabilities

CVE-2025-13601 — Glib: integer overflow in in g_escape_uri_string() (CVSS 7.7)
CVE-2025-3155 — Yelp: arbitrary file read (CVSS 7.4)
CVE-2025-2784 — Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content (CVSS 6.5)
CVE-2023-3758 — Sssd: race condition during authorization leads to gpo policies functioning inconsistently (CVSS 7.1)
CVE-2023-6915 — Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c (CVSS 5.5)
CVE-2024-0193 — Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation (CVSS 6.7)
CVE-2023-4641 — Shadow-utils: possible password leak during passwd(1) change (CVSS 5.5)
CVE-2023-5633 — Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVSS 7.8)
CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability (CVSS 7.8) — exploited
CVE-2023-4732 — Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h (CVSS 4.7)
CVE-2023-4042 — Ghostscript: incomplete fix for cve-2020-16305 (CVSS 5.5)
CVE-2021-3733 — (CVSS 6.5)
CVE-2021-3737 — (CVSS 7.5)
CVE-2021-3744 — (CVSS 5.5)
CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability (CVSS 7.8) — exploited
CVE-2021-3930 — (CVSS 6.5)
CVE-2020-27842 — (CVSS 5.5)