AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-14324

Red Hat Enterprise Linux: null pointer dereference

Red Hat

CVE-2026-14324 · Published Jul 1, 2026 · updated Nov 5, 2026

Medium6.5
No fix yet
Red Hat advisory

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

Affected versions

PackageAffectedFixed in
Red Hat Enterprise Linux 10
Product
all versionsNo fix yet
Red Hat Enterprise Linux 8
Product
all versionsNo fix yet
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-476

More Red Hat advisories

All Red Hat
Medium 6.5Jul 1Red Hat Satellite 6: improper access controlCVE-2026-5135no fix yetMedium 4.3Jul 1Red Hat Satellite 6: information disclosureCVE-2026-5138no fix yetMedium 6.5Jul 1Red Hat Satellite 6: information disclosureCVE-2026-5142no fix yetMedium 5.5Jul 1Red Hat Enterprise Linux: resource exhaustionCVE-2026-14330no fix yetCritical 9.1Jul 1Red Hat Feast Feature Server: denial of serviceCVE-2026-23537fixed in 0.59.0High 8.8Jul 1Red Hat Satellite 6: privilege escalationCVE-2026-5136no fix yet