Fedora vulnerabilities
90 CVEs and advisories name Fedora as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-94422xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
- CVE-2026-19816PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
- CVE-2026-19624NetworkManager-l2tp: local privilege escalation via ipsec.conf injection
- CVE-2024-2746Incomplete fix for CVE-2024-1929
- CVE-2024-1929Local Root Exploit via Configuration Dictionary
- CVE-2024-1930No Limit on Number of Open Sessions / Bad Session Close Behaviour
- CVE-2023-4235Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function
- CVE-2023-4234Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function
- CVE-2023-4233Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function
- CVE-2023-4232Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function
- CVE-2023-3966Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
- CVE-2024-1312Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu
- CVE-2021-4435Yarn: untrusted search path
- CVE-2023-6780Glibc: integer overflow in __vsyslog_internal()
- CVE-2023-6779Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()
- CVE-2023-6246Glibc: heap-based buffer overflow in __vsyslog_internal()
- CVE-2023-6258Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths
- CVE-2023-6200Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability
- CVE-2023-6395Mock: privilege escalation for users that can access mock configuration
- CVE-2023-7090Sudo: improper handling of ipa_hostname leads to privilege mismanagement
- CVE-2023-4255W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
- CVE-2023-4256Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c
- CVE-2023-3430Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp
- CVE-2023-6560Kernel: io_uring out of boundary memory access in __io_uaddr_map()
- CVE-2023-5972Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c
- CVE-2023-6238Kernel: nvme: memory corruption via unprivileged user passthrough
- CVE-2023-6039Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect
- CVE-2023-4154Samba: ad dc password exposure to privileged users and rodcs
- CVE-2023-1194Use-after-free in parse_lease_state()
- CVE-2022-4900Potential buffer overflow in php_cli_server_startup_workers