[UPDATE] [high] Red Hat Enterprise Linux: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to execute arbitrary code, bypass security measures, disclose confidential information, cause a denial-of-service condition, escalate privileges, and manipulate data.
CSIRTS triage
- What
- Multiple vulnerabilities in Red Hat Enterprise Linux enable remote code execution, security bypass, information disclosure, denial of service, privilege escalation, and data manipulation.
- Who is affected
- All Red Hat Enterprise Linux systems running affected versions.
- Urgency
- High priority; remote code execution and privilege escalation across core OS require immediate patching.
- Action
- Apply all Red Hat Enterprise Linux security updates for the listed CVEs without delay.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Enterprise Linux
Get an email when a new Enterprise Linux advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1185
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2021-446481.9% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 78% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2021-467900.50% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2021-468290.79% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 53% of all EPSS-scored CVEs.
- Moderate exploitation riskCVE-2022-276642.6% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 84% of all EPSS-scored CVEs.
- Moderate exploitation riskCVE-2022-288053.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 86% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2022-307840.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2022-307860.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2022-307880.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2022-307890.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.
- Moderate exploitation riskCVE-2022-32041.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 69% of all EPSS-scored CVEs.
Referenced CVEs
+6 more CVEs referenced in this advisory.
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Red Hat Enterprise Linux
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[NEW] [medium] Red Hat Enterprise Linux (gpsd): Vulnerability enables code executioncert-bund · 2026-08-07
- medium[NEW] [medium] Red Hat Enterprise Linux AI (libaom): Multiple vulnerabilitiescert-bund · 2026-08-07
- high[UPDATE] [high] Red Hat Enterprise Linux AI: Vulnerability enables code executioncert-bund · 2026-08-07
- high[NEW] [high] Red Hat Enterprise Linux (sssd, glib, c-ares): Multiple vulnerabilitiescert-bund · 2026-08-07
- medium[UPDATE] [medium] Red Hat Enterprise Linux (libyang): Vulnerability allows Denial of Servicecert-bund · 2026-08-07
- high[UPDATE] [high] Red Hat Enterprise Linux (urllib3): Multiple vulnerabilities allow denial of servicecert-bund · 2026-08-07
More from CERT-Bund (BSI) Security Advisories
- medium[NEW] [medium] jsoup: Vulnerability enables Cross-Site Scripting2026-08-07
- high[NEW] [high] Apache Portable Runtime (APR): Multiple vulnerabilities2026-08-07
- high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities2026-08-07
- medium[UPDATE] [medium] Golang Go: Multiple vulnerabilities2026-08-07
- high[UPDATE] [high] Linux Kernel: Multiple vulnerabilities2026-08-07