Database/Kernel, userspace & hypervisor
OpenSSH (sshd, RHEL9): Signal-handling race in the privsep child - possible RCE, RHEL 9 specific
CVSS 7.0CVE-2024-6409Kernel, userspace & hypervisorcurated
Impact
Signal-handling race in the privsep child - possible RCE, RHEL 9 specific
Who can reach it
Unauthenticated network
What to do
Package update + sshd restart
References
Related entries
- sudo: Local privilege escalation via the `--host` option against host-specific sudoers rulesCVE-2025-32462 · sudoHigh
- glibc: Static setuid binaries incorrectly search LD_LIBRARY_PATH during dlopen - local privilege escalationCVE-2025-4802 · glibcHigh
- Xen (x86): CPU opcode cache corruption - host instability triggerable from a guestCVE-2025-54518 · Xen (x86)High
- libblockdev / udisks: allow_active to root via libblockdev through udisksCVE-2025-6019 · libblockdev / udisksHigh
- Linux kernel (arch/x86/kernel/fpu): A guest that disables an XSAVE feature through XFD while the saved XSTATE_BV stillCVE-2026-23005 · Linux kernel (arch/x86/kernel/fpu)High
- Linux kernel (net/rds): RDS always programs the masked variants of the RDMA atomic opcodes, but the send-completionCVE-2026-52939 · Linux kernel (net/rds)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.