Oracle Corporation Oracle Linux vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20223
4. 20231
5. 20241
6. 20263

Newest CVEs

• CVE-2026-35233

  An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches…

  Oracle Corporation · Oracle Linux

  Medium4.4
• CVE-2026-21996

  An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()

  Oracle Corporation · Oracle Linux

  Low3.3
• CVE-2026-21991

  A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

  Oracle Corporation · Oracle Linux

  Medium5.5
• CVE-2022-21505

  In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is…

  Oracle Corporation · Oracle Linux

  Medium6.7
• CVE-2023-22024

  In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A…

  Oracle Corporation · Oracle Linux

  Medium5.5
• CVE-2022-21385

  A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts).…

  Oracle Corporation · Oracle Linux

  Medium6.2
• CVE-2022-21504

  The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a…

  Oracle Corporation · Oracle Linux

  Medium5.5
• CVE-2022-21499

  KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could…

  Oracle Corporation · Oracle Linux

  Medium6.7
• CVE-2021-2464

  Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitable vulnerability allows low privileged…

  Oracle Corporation · Oracle Linux

  High7.8
• CVE-2020-2732

  A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some…

  Oracle Corporation · Oracle Linux

  Medium5.8