Known vulnerabilities in kernel-rt-kvm (Red Hat package)
Vendor:
Red Hat Inc.
Software:
kernel-rt-kvm (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:kernel-rt-kvm_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
17
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (17)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140104 - Expired pointer dereference CVE-2026-17523 |
CWE-825 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 30.07.2026 |
SB2026073035 SB2026081777 SB2026081778 and 2 more |
||
| #VU139787 - Out-of-bounds read CVE-2026-64219 |
CWE-125 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 27.07.2026 |
SB20260727368 SB2026072892 SB2026072897 and 11 more |
||
| #VU139786 - Stack-based buffer overflow CVE-2026-64219 |
CWE-121 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 27.07.2026 |
SB20260727367 SB2026072892 SB2026072897 and 11 more |
||
| #VU138889 - Improper Initialization CVE-2026-53374 |
CWE-665 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 21.07.2026 |
SB2026072165 SB2026072356 SB2026072363 and 19 more |
||
| #VU138779 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-63879 |
CWE-362 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 20.07.2026 |
SB20260720398 SB2026072366 SB2026072479 and 6 more |
||
| #VU138767 - Use After Free CVE-2026-63884 |
CWE-416 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 20.07.2026 |
SB20260720352 SB2026072366 SB2026072479 and 6 more |
||
| #VU136723 - Integer overflow CVE-2026-53329 |
CWE-190 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 02.07.2026 |
SB2026070277 SB20260721153 SB2026072258 and 5 more |
||
| #VU135657 - Heap-based Buffer Overflow CVE-2026-53136 |
CWE-122 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 26.06.2026 |
SB20260626217 SB20260721153 SB2026072258 and 6 more |
||
| #VU135361 - Out-of-bounds write CVE-2026-53016 |
CWE-787 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 25.06.2026 |
SB20260625169 SB2026070835 SB2026070840 and 50 more |
||
| #VU130535 - Out-of-bounds write CVE-2026-43206 |
CWE-787 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 07.05.2026 |
SB20260507146 SB2026060964 SB20260610116 and 66 more |
||
| #VU118478 - Use After Free CVE-2025-40186 |
CWE-416 | Low | 5.14.0-427.103.1.el9_4 | 13.11.2025 |
SB2025111318 SB2025120135 SB2025121540 and 38 more |
||
| #VU117264 - Use After Free CVE-2025-39966 |
CWE-416 | Low | 6.12.0-55.50.1.el10_0 | 15.10.2025 |
SB20251015112 SB2025120808 SB2025121709 and 1 more |
||
| #VU117260 - Use After Free CVE-2025-39984 |
CWE-416 | Low | 6.12.0-55.50.1.el10_0 | 15.10.2025 |
SB20251015107 SB2025111182 SB2025111860 and 3 more |
||
| #VU116879 - Resource Management Errors CVE-2025-39955 |
CWE-399 | Low | 5.14.0-427.103.1.el9_4 | 09.10.2025 |
SB2025100969 SB2025111182 SB2025111213 and 50 more |
||
| #VU116234 - NULL Pointer Dereference CVE-2025-39902 |
CWE-476 | Low | 4.18.0-553.156.1.rt7.497.el8_10 | 01.10.2025 |
SB2025100156 SB2025111182 SB2025111858 and 30 more |
||
| #VU115973 - Use After Free CVE-2025-39864 |
CWE-416 | Low | 5.14.0-427.103.1.el9_4 | 22.09.2025 |
SB2025092210 SB2025092303 SB2025092304 and 44 more |
||
| #VU113807 - Improper input validation CVE-2025-38499 |
CWE-20 | Low | 6.12.0-55.50.1.el10_0 | 11.08.2025 |
SB2025081153 SB2025081507 SB2025081508 and 94 more |