Known vulnerabilities in Red Hat In-Vehicle Operating System 1

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-32255	A flaw was found in the Linux kernel's ksmbd component	5.3 Medium	Aug 2, 2025
CVE-2023-32256	Kernel: ksmbd race issue from smb2 close and logoff with multichannel	7.5 High	Aug 1, 2025
CVE-2023-32251	A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server)	3.7 Low	Jul 31, 2025
CVE-2023-2593	Kernel: ksmbd memory exhaustion denial-of-service vulnerability	5.9 Medium	Jul 30, 2025
CVE-2025-8283	Netavark: podman: netavark may resolve hostnames to unexpected hosts	3.7 Low	Jul 28, 2025
CVE-2025-4056	Glib: glib crash after long command line	7.5 High	Jul 28, 2025
CVE-2025-5449	Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service	6.5 Medium	Jul 25, 2025
CVE-2025-8114	Libssh: null pointer dereference in libssh kex session id calculation	4.7 Medium	Jul 24, 2025
CVE-2025-6018	Pam-config: lpe from unprivileged to allow_active in pam	7.8 High	Jul 23, 2025
CVE-2025-4878	Libssh: use of uninitialized variable in privatekey_from_file()	3.6 Low	Jul 22, 2025
CVE-2025-7519	Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write	6.7 Medium	Jul 14, 2025
CVE-2025-6395	Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()	6.5 Medium	Jul 10, 2025
CVE-2025-7424	Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes	7.5 High	Jul 10, 2025
CVE-2025-7425	Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr	7.8 High	Jul 10, 2025
CVE-2025-32990	Gnutls: vulnerability in gnutls certtool template parsing	6.5 Medium	Jul 10, 2025
CVE-2025-32989	Gnutls: vulnerability in gnutls sct extension parsing	5.3 Medium	Jul 10, 2025
CVE-2025-32988	Gnutls: vulnerability in gnutls othername san export	6.5 Medium	Jul 10, 2025
CVE-2025-7345	Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf	7.5 High	Jul 8, 2025
CVE-2025-5987	Libssh: invalid return code for chacha20 poly1305 with openssl backend	8.1 High	Jul 7, 2025
CVE-2025-5351	Libssh: double free vulnerability in libssh key export functions	6.5 Medium	Jul 4, 2025
CVE-2025-5318	Libssh: out-of-bounds read in sftp_handle()	5.4 Medium	Jun 24, 2025
CVE-2025-6032	A flaw was found in Podman	8.3 High	Jun 24, 2025
CVE-2025-6019	A Local Privilege Escalation (LPE) vulnerability was found in libblockdev	7.0 High	Jun 19, 2025
CVE-2025-49180	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension	7.8 High	Jun 17, 2025
CVE-2025-49179	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension	7.3 High	Jun 17, 2025

Other Red Hat products