Red Hat Enterprise Linux Server Update Services For SAP Solutions 8.1

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

Published: 2023-02-01T00:00:00.000Z
Updated: 2025-03-27T14:42:34.058Z

A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.

Published: 2022-12-14T00:00:00.000Z
Updated: 2026-05-27T14:04:59.552Z

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

Published: 2022-03-07T00:00:00.000Z
Updated: 2025-10-21T23:15:44.668Z

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

Published: 2022-03-03T00:00:00.000Z
Updated: 2026-06-03T03:55:20.847Z

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

Published: 2022-03-25T00:00:00.000Z
Updated: 2024-08-02T23:25:40.079Z