Enterprise Linux For Real Time TUS vulnerabilities

6 known vulnerabilities in Enterprise Linux For Real Time TUS from Red Hat. 6 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  kernel: Out-of-bounds Write

  CVE-2022-0435Mar 25, 2022KernelEPSS 67.8%

  A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system

• 7.8 High severity

  kernel: Improper Preservation of Permissions

  CVE-2022-0330Mar 25, 2022Kernel

  A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

• 7.8 High severity

  kernel: Use After Free

  CVE-2022-1011Mar 18, 2022KernelEPSS 1.17%

  A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

• 7.8 High severity

  Linux Kernel Privilege Escalation Exploited

  CVE-2022-0847Mar 10, 2022KernelEPSS 92.8%

  A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use th

• 7.8 High severity

  Linux Kernel Improper Authentication Exploited

  CVE-2022-0492Mar 3, 2022KernelEPSS 5.53%

  A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace

• 7.8 High severity

  Linux Kernel Improper Privilege Management Exploited

  CVE-2019-13272Jul 17, 2019LinuxEPSS 52.2%

  In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-