PatchTheCEVenterprise linux vulnerabilities and fixes
Recent CVEs affecting enterprise linux, with upgrade or downgrade steps. 11 tracked.
enterprise linux has 11 tracked vulnerabilities, 0 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 11. Most recent: 2026-09-29. Highest priority: CVE-2015-5477 (score 91/100).
- CVE-2023-30549 HIGH 7.1 UPGRADE MITIGATE Apptainer is an open source container platform for Linux
- CVE-2023-6915 MEDIUM 6.2 MITIGATE DOWNGRADE A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel
- CVE-2026-71227 MEDIUM 5.1 MITIGATE DOWNGRADE A flaw was found in libkcapi
- CVE-2026-71226 HIGH 7.3 MITIGATE DOWNGRADE Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error befor
- CVE-2026-71225 MEDIUM 6.5 MITIGATE DOWNGRADE A flaw was found in libkcapi
- CVE-2026-58015 MEDIUM 5.9 UPGRADE MITIGATE A flaw was found in GLib
- CVE-2026-58014 HIGH 7.3 UPGRADE MITIGATE A flaw was found in GLib
- CVE-2026-102560 HIGH 8.6 UPGRADE MITIGATE A flaw was found in libsoup
- CVE-2015-5477 HIGH 7.5 EXPLOITED UPGRADE MITIGATE ISC BIND Data Processing Errors Vulnerability
- CVE-2015-3246 HIGH 7.4 EXPLOITED MITIGATE MITIGATE Red Hat Libuser Race Condition Vulnerability
- CVE-2015-5287 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
FAQ
How do I fix enterprise linux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is enterprise linux being exploited right now?
Yes: 3 enterprise linux CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.
Which enterprise linux CVE should I patch first?
CVE-2015-5477 currently ranks highest (91/100): ISC BIND Data Processing Errors Vulnerability.