Codeready Linux Builder

Vendor:

First CVE: Apr 11, 2019 · Active for 7 years

42

Total CVEs

More Total CVEs than 97% of tracked products

7.0

Avg CVEs / Year

Higher CVE frequency than 92% of tracked products

6.9

Avg CVSS

Higher Avg CVSS than 39% of tracked products

9.5%

KEV Rate

Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Codeready Linux Builder over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 11, 2019

7 years ago

Most Recent CVE

Nov 26, 2025

240 days ago

CVE Severity & Scoring

Codeready Linux Builder42 CVEs

50%

All CVEs352,294 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local27 (64.3%)

Network12 (28.6%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network3 (7.1%)

Attack Complexity

Low36 (85.7%)

High6 (14.3%)

Unknown0 (0.0%)

User Interaction

None35 (83.3%)

Unknown0 (0.0%)

Required7 (16.7%)

Privileges Required

Low28 (66.7%)

High1 (2.4%)

None13 (31.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (42 CVEs).

42 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2023-4911HIGH A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us	Oct 3, 2023	7.8	98	YES	YES
CVE-2022-0847HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ker	Mar 10, 2022	7.8	98	YES	YES
CVE-2022-0492HIGH A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the	Mar 3, 2022	7.8	79	YES	YES
CVE-2021-44142HIGH The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileser	Feb 21, 2022	8.8	70	NO	NO
CVE-2022-0435HIGH A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is	Mar 25, 2022	8.8	67	NO	NO
CVE-2019-8720HIGH A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addre	Mar 6, 2023	8.8	65	YES	NO
CVE-2025-3155HIGH A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents,	Apr 3, 2025	7.4	33	NO	NO
CVE-2025-13601HIGH A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a ver	Nov 26, 2025	7.7	30	NO	NO
CVE-2021-3656HIGH A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest t	Mar 4, 2022	8.8	28	NO	NO
CVE-2020-25717HIGH A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.	Feb 18, 2022	8.1	27	NO	NO

View all 42 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (42 CVEs).

CISA KEV

4 CVEs

9.5% of CVEs· 97th percentile

Metasploit

3 CVEs

7.1% of CVEs· 97th percentile

Nuclei

1 CVE

2.4% of CVEs· 96th percentile

ExploitDB

2 CVEs

4.8% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (42 CVEs).

Media Mentions

Signals from CVEs in this product scope (42 CVEs).

Top CNAs Publishing CVEs For Codeready Linux Builder

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	KEV	Exploits
9.0	7	7.2	13.7%	1	1
8.4	2	8.3	34.2%	0	0
8.2	1	7.8	5.5%	1	1
8.0	18	6.8	6.4%	2	1
10.0	1	6.5	0.8%	0	0