Linux Enterprise High Performance Computing

Vendor:

First CVE: Mar 3, 2020 · Active for 6 years

12
Total CVEs
More Total CVEs than 90% of tracked products
2.4
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
16.7%
KEV Rate
Higher KEV Rate than 98% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Linux Enterprise High Performance Computing over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 3, 2020
6 years ago
Most Recent CVE
Apr 22, 2026
93 days ago

CVE Severity & Scoring

Linux Enterprise High Performance Computing12 CVEs
All CVEs352,294 CVEs
MediumHighCritical
Attack Vector
Local11 (91.7%)
Network1 (8.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None7 (58.3%)
Unknown0 (0.0%)
Required5 (41.7%)
Privileges Required
Low6 (50.0%)
High0 (0.0%)
None6 (50.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the c
Apr 22, 20267.899YESYES
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri
Jan 28, 20227.898YESYES
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Apr 27, 20227.826NONO
A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUS
Apr 3, 20207.525NONO
A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance
Mar 3, 20207.824NONO
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
Nov 10, 20247.823NONO
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in p
Nov 10, 20247.823NONO
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.
Nov 10, 20247.823NONO
A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterpr
Aug 7, 20209.323NONO
A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterpr
Mar 3, 20207.323NONO

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV
2 CVEs
16.7% of CVEs· 98th percentile
Metasploit
2 CVEs
16.7% of CVEs· 97th percentile
Nuclei
1 CVE
8.3% of CVEs· 97th percentile
ExploitDB
1 CVE
8.3% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For Linux Enterprise High Performance Computing

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
15.047.866.8%22
1519.30.5%00
12.057.30.4%00