Enterprise Linux TUS vulnerabilities

9 known vulnerabilities in Enterprise Linux TUS from Red Hat. 9 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Linux Kernel Missing Initialization of a Variable Exploited

  CVE-2026-46300May 23, 2026LinuxEPSS 16.1%

  In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain th

• 7.5 High severity

  Apache Tomcat Missing Encryption of Sensitive Data Exploited

  CVE-2026-34486Apr 9, 2026ApacheEPSS 98.5%

  Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.2

• 7.5 High severity

  Red Hat Enterprise Linux 10: Heap-based Buffer Overflow

  CVE-2026-5201Mar 31, 2026Red HatEPSS 1.15%

  A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this fl

• 7.3 High severity

  Xwayland: Use After Free

  CVE-2025-62230Oct 30, 2025X.Org

  A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memor

• 7.3 High severity

  Xwayland: Integer Overflow or Wraparound

  CVE-2025-62231Oct 30, 2025X.Org

  A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflo

• 8.8 High severity

  Apple Multiple Products Buffer Overflow Exploited

  CVE-2025-31277Jul 30, 2025AppleEPSS 1.68%

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

• 8.1 High severity

  Red Hat Enterprise Linux 7: Use of Password Hash With Insufficient Computational Effort

  CVE-2024-3183Jun 12, 2024Red HatEPSS 2.05%

  A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the ta

• 7.8 High severity

  Red Hat Enterprise Linux 6 Extended Lifecycle…: Out-of-bounds Write

  CVE-2024-0229Feb 9, 2024Red HatEPSS 1.23%

  An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the serve

• 7.0 High severity

  Linux Kernel Race Condition Exploited

  CVE-2016-5195Nov 10, 2016CanonicalEPSS 83.5%

  Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016