CVE Tools
Track your stack

Codeready Linux Builder For ARM64

13 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for Codeready Linux Builder For ARM64, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Codeready Linux Builder For ARM64 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Codeready Linux Builder For ARM64 CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-042
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-111
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100
2026-110

Severity

How the 13 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High754%
  • Medium646%

Latest CVEs

The 13 most recently published vulnerabilities affecting Codeready Linux Builder For ARM64.

  1. CVE-2025-13601Glib: integer overflow in in g_escape_uri_string()7.7
  2. CVE-2025-3155Yelp: arbitrary file read7.4
  3. CVE-2025-2784Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content7.0
  4. CVE-2023-3758Sssd: race condition during authorization leads to gpo policies functioning inconsistently7.1
  5. CVE-2024-1488Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation8.0
  6. CVE-2023-6915Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c6.2
  7. CVE-2023-4641Shadow-utils: possible password leak during passwd(1) change4.7
  8. CVE-2023-5633Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling7.8
  9. CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalation7.8
  10. CVE-2023-4732Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h4.7
  11. CVE-2023-4806Glibc: potential use-after-free in getaddrinfo()5.9
  12. CVE-2023-4527Glibc: stack read overflow in getaddrinfo in no-aaaa mode6.5
  13. CVE-2023-4042Ghostscript: incomplete fix for cve-2020-163055.5

Product grouping is registry-driven, with AI assist and human review. How it works