Red Hat Hardened Images vulnerabilities and CVEs
Known vulnerabilities affecting Red Hat Hardened Images, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
21 vulnerabilities tracked.
- 8.5 A flaw was found in libxml2 with Python bindings enabled.
- 7.9 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and…
- 7.8 A flaw was found in util-linux.
- 7.8 A flaw was found in Vim's netrw plugin.
- 7.8 openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context.
- 7.7 A flaw was found in libstdc++.
- 7.5 A flaw was found in dracut.
- 7.5 A flaw was found in dracut.
- 7.3 Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are…
- 7.0 A flaw was found in GCC.
- 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA…
- 6.8 A flaw was found in the libblkid library of util-linux.
- 6.5 A flaw was found in libkcapi.
- 6.5 A flaw was found in libxml2.
- 6.1 A flaw was found in OpenSCAP.
- 5.1 A flaw was found in libkcapi.
- 4.5 A flaw was found in the buildah/copier Go package.
- 4.4 A flaw was found in GNU tar.
- 3.9 A flaw was found in libarchive.
- 2.9 A signed integer overflow vulnerability was found in libarchive's ZIP writer.
- 2.5 A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Red Hat Hardened Images is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Windows 11 version 26H1 Windows 11 Version 25H2 Windows 11 Version 24H2 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 Windows Server 2012 (Server Core installation) Red Hat Enterprise Linux 9 MediaTek chipset Red Hat Enterprise Linux 8 n/a Windows 11 Version 26H2 Windows 11 Version 23H2