Codeready Linux Builder For Power Little Endian vulnerabilities

6 known vulnerabilities in Codeready Linux Builder For Power Little Endian from Red Hat. 6 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Red Hat Enterprise Linux 10: Integer Overflow or Wraparound

  CVE-2025-13601Nov 26, 2025Red Hat

  A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calcu

• 7.4 High severity

  Red Hat Enterprise Linux 8: URL Redirection to Untrusted Site

  CVE-2025-3155Apr 3, 2025Red HatEPSS 13.1%

  A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

• 7.1 High severity

  Red Hat Enterprise Linux 8: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2023-3758Apr 18, 2024Red HatEPSS 1.04%

  A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

• 7.8 High severity

  Red Hat Enterprise Linux 8: Use After Free

  CVE-2023-5633Oct 23, 2023Red Hat

  The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration e

• 7.8 High severity

  GNU C Library Buffer Overflow Exploited

  CVE-2023-4911Oct 3, 2023Red HatEPSS 63.8%

  A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binari

• 7.8 High severity

  Linux Kernel Improper Authentication Exploited

  CVE-2022-0492Mar 3, 2022KernelEPSS 5.53%

  A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace