tuned-profiles-oracle (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package tuned-profiles-oracle, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2024-52336 — CVSS 7.8 (high): A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally…
• CVE-2024-52337 — CVSS 5.5 (medium): A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass…