Oracle Corporation Oracle Linux
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-35233 | 8 ; 9 ; 10 | An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-leve | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-21996 | 8 ; 9 ; 10 | An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-21991 | 8 ; 9 ; 10 | A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-21505 | Oracle Linux: 7 ; Oracle Linux: 8 ; Oracle Linux: 9 | In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine whe | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-22024 | Oracle Linux: 6 ; Oracle Linux: 7 ; Oracle Linux: 8 ; … | In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that ar | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-21385 | * | A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availab | MEDIUM 6.2 | 0.4 % | ||
| CVE-2022-21504 | Oracle Linux: 7 ; Oracle Linux: 8 | The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file de | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-21499 | Oracle Linux: 6 ; Oracle Linux: 7 ; Oracle Linux: 8 | KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a seria | MEDIUM 6.7 | 0.6 % | ||
| CVE-2021-2464 | 7 ; 8 | Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitable vulnerability all | HIGH 7.8 | 0.3 % | ||
| CVE-2020-2732 | 7 ; 6 | A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled | MEDIUM 6.8 | 0.9 % |