Veille CVE

Recherche « Oracle Corporation Oracle Linux »

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Oracle Corporation Oracle Linux » ✕
  1. CVE-2026-8863 7.8 Élevée

    Oracle Corporation OracleLinux(7.2) shim · PC-Doctor Service Center Enterprise · PC-Doctor Service Center Drive Erase · PC-Doctor Service Center Japan

    Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

  2. CVE-2026-35233 4.4 Moyenne

    Oracle Corporation Oracle Linux · Oracle linux

    An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via dtrace -p , pid probes, or USDT), the ELF parser reads heap memory beyond the allocated section cache array without any bounds check. This results in an uninitialized/out-of-bounds heap read that can cause a NULL pointer dereference crash of the dtrace process (DoS), or -- depending on heap layout -- a read-then-use of a garbage pointer controlled by adjacent allocations, providing a foothold toward further exploitation in a privileged context.

  3. CVE-2026-21996 5.5 Moyenne

    Oracle Corporation Oracle Linux · Oracle linux

    An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()