# ALAS2023-2023-070: Security update for 19 packages

ALAS2023-2023-070, released February 17, 2023, fixes 111 CVEs across 19 products. 4 of them are being exploited (CVE-2022-0847); 4 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2023-070
- Platform: Linux
- Released: Feb 17, 2023
- Priority: Patch now (Closes CVE-2022-0847, exploited (CISA KEV))
- CVEs: 111, exploited: 4, on CISA KEV: 4
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2023-070.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-livepatch-6.1.10-15.42](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.10-15.42.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-0847](https://patchblox.com/security/data/cve/CVE-2022-0847.md) | Patch now | kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system.  The following packages have be... | 8.8 | 0.9280 | CISA KEV |
| [CVE-2022-0185](https://patchblox.com/security/data/cve/CVE-2022-0185.md) | Patch now | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: x... | 8.4 | 0.2515 | CISA KEV |
| [CVE-2022-2586](https://patchblox.com/security/data/cve/CVE-2022-2586.md) | Patch now | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.1020 | CISA KEV |
| [CVE-2022-0492](https://patchblox.com/security/data/cve/CVE-2022-0492.md) | Patch now | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  The following packages have be... | 8.8 | 0.0553 | CISA KEV |
| [CVE-2022-36946](https://patchblox.com/security/data/cve/CVE-2022-36946.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0887 |  |
| [CVE-2022-4379](https://patchblox.com/security/data/cve/CVE-2022-4379.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: u... | 7.8 | 0.0663 |  |
| [CVE-2022-2588](https://patchblox.com/security/data/cve/CVE-2022-2588.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * A use-aft... | 7.8 | 0.0587 |  |
| [CVE-2022-43945](https://patchblox.com/security/data/cve/CVE-2022-43945.md) | High | kernel-zfcpdump: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: m... | 7.8 | 0.0546 |  |
| [CVE-2022-34918](https://patchblox.com/security/data/cve/CVE-2022-34918.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: h... | 7.8 | 0.0545 |  |
| [CVE-2022-0742](https://patchblox.com/security/data/cve/CVE-2022-0742.md) | High | linux: Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-... | 7.5 | 0.0504 |  |
| [CVE-2022-29901](https://patchblox.com/security/data/cve/CVE-2022-29901.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * A use-aft... | 7.8 | 0.0501 |  |
| [CVE-2022-29900](https://patchblox.com/security/data/cve/CVE-2022-29900.md) | High | AMD: CVE-2022-29900 AMD CPU Branch Type Confusion | 7.8 | 0.0394 |  |
| [CVE-2022-32250](https://patchblox.com/security/data/cve/CVE-2022-32250.md) | High | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0291 |  |
| [CVE-2022-25636](https://patchblox.com/security/data/cve/CVE-2022-25636.md) | High | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0263 |  |
| [CVE-2022-1199](https://patchblox.com/security/data/cve/CVE-2022-1199.md) | High | linux: A flaw was found in the Linux kernel | 7.5 | 0.0217 |  |
| [CVE-2022-27223](https://patchblox.com/security/data/cve/CVE-2022-27223.md) | High | linux: In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and mi... | 8.8 | 0.0213 |  |
| [CVE-2022-23222](https://patchblox.com/security/data/cve/CVE-2022-23222.md) | High | kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  For more de... | 8.0 | 0.0203 |  |
| [CVE-2023-0179](https://patchblox.com/security/data/cve/CVE-2023-0179.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: u... | 7.8 | 0.0194 |  |
| [CVE-2022-2602](https://patchblox.com/security/data/cve/CVE-2022-2602.md) | High | linux: io_uring UAF, Unix SCM garbage collection | 7.0 | 0.0143 |  |
| [CVE-2022-2585](https://patchblox.com/security/data/cve/CVE-2022-2585.md) | High | kernel-rt-debug-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0128 |  |
| [CVE-2022-3623](https://patchblox.com/security/data/cve/CVE-2022-3623.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 7.5 | 0.0110 |  |
| [CVE-2022-2078](https://patchblox.com/security/data/cve/CVE-2022-2078.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0105 |  |
| [CVE-2022-32981](https://patchblox.com/security/data/cve/CVE-2022-32981.md) | High | linux: An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms | 7.8 | 0.0097 |  |
| [CVE-2022-3534](https://patchblox.com/security/data/cve/CVE-2022-3534.md) | High | libbpf: A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1 | 8.0 | 0.0096 |  |
| [CVE-2022-29581](https://patchblox.com/security/data/cve/CVE-2022-29581.md) | High | kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0093 |  |
| [CVE-2022-36123](https://patchblox.com/security/data/cve/CVE-2022-36123.md) | High | linux: The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss) | 7.8 | 0.0089 |  |
| [CVE-2022-1679](https://patchblox.com/security/data/cve/CVE-2022-1679.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0081 |  |
| [CVE-2022-30594](https://patchblox.com/security/data/cve/CVE-2022-30594.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0080 |  |
| [CVE-2022-23825](https://patchblox.com/security/data/cve/CVE-2022-23825.md) | High | AMD: CVE-2022-23825 AMD CPU Branch Type Confusion | 7.8 | 0.0079 |  |
| [CVE-2022-29582](https://patchblox.com/security/data/cve/CVE-2022-29582.md) | High | linux: In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts | 7.0 | 0.0077 |  |
| [CVE-2022-3566](https://patchblox.com/security/data/cve/CVE-2022-3566.md) | High | linux: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161 | 7.1 | 0.0074 |  |
| [CVE-2023-0461](https://patchblox.com/security/data/cve/CVE-2023-0461.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 7.8 | 0.0065 |  |
| [CVE-2022-0001](https://patchblox.com/security/data/cve/CVE-2022-0001.md) | High | Intel: CVE-2022-0001 Branch History Injection | 8.2 | 0.0051 |  |
| [CVE-2022-1055](https://patchblox.com/security/data/cve/CVE-2022-1055.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0050 |  |
| [CVE-2022-23960](https://patchblox.com/security/data/cve/CVE-2022-23960.md) | High | Arm: CVE-2022-23960 Cache Speculation Restriction Vulnerability | 7.8 | 0.0050 | Disclosed |
| [CVE-2022-0854](https://patchblox.com/security/data/cve/CVE-2022-0854.md) | High | kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0046 |  |
| [CVE-2022-0002](https://patchblox.com/security/data/cve/CVE-2022-0002.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0045 |  |
| [CVE-2022-4378](https://patchblox.com/security/data/cve/CVE-2022-4378.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: s... | 7.8 | 0.0044 |  |
| [CVE-2022-1016](https://patchblox.com/security/data/cve/CVE-2022-1016.md) | High | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0044 |  |
| [CVE-2023-3111](https://patchblox.com/security/data/cve/CVE-2023-3111.md) | High | linux: A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel | 7.8 | 0.0044 |  |
| [CVE-2022-0494](https://patchblox.com/security/data/cve/CVE-2022-0494.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * A use-aft... | 7.8 | 0.0042 |  |
| [CVE-2022-24958](https://patchblox.com/security/data/cve/CVE-2022-24958.md) | High | linux: drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release. | 7.8 | 0.0041 |  |
| [CVE-2022-28893](https://patchblox.com/security/data/cve/CVE-2022-28893.md) | High | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0041 |  |
| [CVE-2022-1158](https://patchblox.com/security/data/cve/CVE-2022-1158.md) | High | kernel-zfcpdump-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0041 |  |
| [CVE-2022-1353](https://patchblox.com/security/data/cve/CVE-2022-1353.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0040 |  |
| [CVE-2023-26544](https://patchblox.com/security/data/cve/CVE-2023-26544.md) | High | linux: In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between... | 7.8 | 0.0039 |  |
| [CVE-2022-29156](https://patchblox.com/security/data/cve/CVE-2022-29156.md) | High | linux: drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_r... | 7.8 | 0.0038 |  |
| [CVE-2022-26373](https://patchblox.com/security/data/cve/CVE-2022-26373.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0037 |  |
| [CVE-2022-33743](https://patchblox.com/security/data/cve/CVE-2022-33743.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0036 |  |
| [CVE-2022-0500](https://patchblox.com/security/data/cve/CVE-2022-0500.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  For more de... | 8.0 | 0.0036 |  |
| [CVE-2022-39189](https://patchblox.com/security/data/cve/CVE-2022-39189.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0034 |  |
| [CVE-2022-33742](https://patchblox.com/security/data/cve/CVE-2022-33742.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0034 |  |
| [CVE-2022-26365](https://patchblox.com/security/data/cve/CVE-2022-26365.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0033 |  |
| [CVE-2022-33740](https://patchblox.com/security/data/cve/CVE-2022-33740.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0033 |  |
| [CVE-2022-33741](https://patchblox.com/security/data/cve/CVE-2022-33741.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0033 |  |
| [CVE-2022-1852](https://patchblox.com/security/data/cve/CVE-2022-1852.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0033 |  |
| [CVE-2022-1729](https://patchblox.com/security/data/cve/CVE-2022-1729.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: r... | 7.4 | 0.0033 |  |
| [CVE-2022-3176](https://patchblox.com/security/data/cve/CVE-2022-3176.md) | High | linux: There exists a use-after-free in io_uring in the Linux kernel | 7.8 | 0.0030 |  |
| [CVE-2021-26401](https://patchblox.com/security/data/cve/CVE-2021-26401.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0029 |  |
| [CVE-2022-1184](https://patchblox.com/security/data/cve/CVE-2022-1184.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0029 |  |
| [CVE-2022-1973](https://patchblox.com/security/data/cve/CVE-2022-1973.md) | High | linux: A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal | 7.1 | 0.0029 |  |
| [CVE-2022-4139](https://patchblox.com/security/data/cve/CVE-2022-4139.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: m... | 7.8 | 0.0027 |  |
| [CVE-2022-45869](https://patchblox.com/security/data/cve/CVE-2022-45869.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 7.8 | 0.0026 |  |
| [CVE-2024-0562](https://patchblox.com/security/data/cve/CVE-2024-0562.md) | High | linux: A use-after-free flaw was found in the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-4387](https://patchblox.com/security/data/cve/CVE-2023-4387.md) | High | linux: A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 e... | 7.1 | 0.0024 |  |
| [CVE-2022-3028](https://patchblox.com/security/data/cve/CVE-2022-3028.md) | High | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.0 | 0.0023 |  |
| [CVE-2023-0590](https://patchblox.com/security/data/cve/CVE-2023-0590.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 7.0 | 0.0023 |  |
| [CVE-2022-48619](https://patchblox.com/security/data/cve/CVE-2022-48619.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 |  |
| [CVE-2022-3522](https://patchblox.com/security/data/cve/CVE-2022-3522.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 7.0 | n/a |  |
| [CVE-2022-1966](https://patchblox.com/security/data/cve/CVE-2022-1966.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: S... | n/a | n/a |  |
| [CVE-2022-21123](https://patchblox.com/security/data/cve/CVE-2022-21123.md) | Routine | Intel: CVE-2022-21123 Shared Buffers Data Read (SBDR) | 6.1 | 0.0687 |  |
| [CVE-2022-21125](https://patchblox.com/security/data/cve/CVE-2022-21125.md) | Routine | Intel: CVE-2022-21125 Shared Buffers Data Sampling (SBDS) | 6.1 | 0.0645 |  |
| [CVE-2022-21166](https://patchblox.com/security/data/cve/CVE-2022-21166.md) | Routine | Intel: CVE-2022-21166 Device Register Partial Write (DRPW) | 6.1 | 0.0645 |  |
| [CVE-2022-3435](https://patchblox.com/security/data/cve/CVE-2022-3435.md) | Routine | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 5.5 | 0.0518 |  |
| [CVE-2022-2663](https://patchblox.com/security/data/cve/CVE-2022-2663.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.3 | 0.0407 |  |
| [CVE-2022-1015](https://patchblox.com/security/data/cve/CVE-2022-1015.md) | Routine | linux: A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem | 6.6 | 0.0149 |  |
| [CVE-2022-3523](https://patchblox.com/security/data/cve/CVE-2022-3523.md) | Routine | kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 5.3 | 0.0114 |  |
| [CVE-2022-3524](https://patchblox.com/security/data/cve/CVE-2022-3524.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 5.5 | 0.0109 |  |
| [CVE-2023-0394](https://patchblox.com/security/data/cve/CVE-2023-0394.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 6.5 | 0.0104 |  |
| [CVE-2023-0459](https://patchblox.com/security/data/cve/CVE-2023-0459.md) | Routine | perf: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 6.7 | 0.0064 |  |
| [CVE-2022-39842](https://patchblox.com/security/data/cve/CVE-2022-39842.md) | Routine | linux: An issue was discovered in the Linux kernel before 5.19 | 6.1 | 0.0060 |  |
| [CVE-2022-3643](https://patchblox.com/security/data/cve/CVE-2022-3643.md) | Routine | linux: Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface... | 6.5 | 0.0049 |  |
| [CVE-2022-1263](https://patchblox.com/security/data/cve/CVE-2022-1263.md) | Routine | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 5.5 | 0.0044 |  |
| [CVE-2022-2905](https://patchblox.com/security/data/cve/CVE-2022-2905.md) | Routine | linux: An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call... | 5.5 | 0.0037 |  |
| [CVE-2022-43750](https://patchblox.com/security/data/cve/CVE-2022-43750.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0036 |  |
| [CVE-2022-3606](https://patchblox.com/security/data/cve/CVE-2022-3606.md) | Routine | libbpf1: A vulnerability was found in Linux Kernel | 5.5 | 0.0035 |  |
| [CVE-2023-2019](https://patchblox.com/security/data/cve/CVE-2023-2019.md) | Routine | linux: A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events | 4.4 | 0.0034 |  |
| [CVE-2022-1462](https://patchblox.com/security/data/cve/CVE-2022-1462.md) | Routine | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.3 | 0.0034 |  |
| [CVE-2022-34495](https://patchblox.com/security/data/cve/CVE-2022-34495.md) | Routine | linux: rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. | 5.5 | 0.0034 |  |
| [CVE-2022-1789](https://patchblox.com/security/data/cve/CVE-2022-1789.md) | Routine | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system.  The following packages have be... | 6.8 | 0.0034 |  |
| [CVE-2022-39190](https://patchblox.com/security/data/cve/CVE-2022-39190.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0033 |  |
| [CVE-2023-0469](https://patchblox.com/security/data/cve/CVE-2023-0469.md) | Routine | linux: A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the... | 5.5 | 0.0032 |  |
| [CVE-2021-26341](https://patchblox.com/security/data/cve/CVE-2021-26341.md) | Routine | kernel-zfcpdump-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.  The following packages have be... | 6.5 | 0.0032 |  |
| [CVE-2022-3567](https://patchblox.com/security/data/cve/CVE-2022-3567.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 6.4 | 0.0032 |  |
| [CVE-2022-36879](https://patchblox.com/security/data/cve/CVE-2022-36879.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0032 |  |
| [CVE-2022-3303](https://patchblox.com/security/data/cve/CVE-2022-3303.md) | Routine | linux: A race condition flaw was found in the Linux kernel sound subsystem due to improper locking | 4.7 | 0.0032 |  |
| [CVE-2022-0171](https://patchblox.com/security/data/cve/CVE-2022-0171.md) | Routine | linux: A flaw was found in the Linux kernel | 5.5 | 0.0030 |  |
| [CVE-2022-34494](https://patchblox.com/security/data/cve/CVE-2022-34494.md) | Routine | linux: rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. | 5.5 | 0.0029 |  |
| [CVE-2022-3061](https://patchblox.com/security/data/cve/CVE-2022-3061.md) | Routine | linux: Found Linux Kernel flaw in the i740 driver | 5.5 | 0.0029 |  |
| [CVE-2022-3543](https://patchblox.com/security/data/cve/CVE-2022-3543.md) | Routine | linux: A vulnerability, which was classified as problematic, has been found in Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2023-4459](https://patchblox.com/security/data/cve/CVE-2023-4459.md) | Routine | linux: A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networkin... | 5.5 | 0.0025 |  |
| [CVE-2022-39188](https://patchblox.com/security/data/cve/CVE-2022-39188.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 4.7 | 0.0025 |  |
| [CVE-2022-42328](https://patchblox.com/security/data/cve/CVE-2022-42328.md) | Routine | linux: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text e... | 5.5 | 0.0022 |  |
| [CVE-2022-42329](https://patchblox.com/security/data/cve/CVE-2022-42329.md) | Routine | linux: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text e... | 5.5 | 0.0022 |  |
| [CVE-2023-1637](https://patchblox.com/security/data/cve/CVE-2023-1637.md) | Routine | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: i... | 5.5 | 0.0022 |  |
| [CVE-2022-40307](https://patchblox.com/security/data/cve/CVE-2022-40307.md) | Routine | linux: An issue was discovered in the Linux kernel through 5.19.8 | 4.7 | 0.0021 |  |
| [CVE-2023-2177](https://patchblox.com/security/data/cve/CVE-2023-2177.md) | Routine | kernel-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * use-after... | 5.5 | 0.0021 |  |
| [CVE-2022-4842](https://patchblox.com/security/data/cve/CVE-2022-4842.md) | Routine | linux: A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found | 5.5 | 0.0020 |  |
| [CVE-2022-21505](https://patchblox.com/security/data/cve/CVE-2022-21505.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0020 |  |
| [CVE-2023-3357](https://patchblox.com/security/data/cve/CVE-2023-3357.md) | Routine | linux: A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver | 5.5 | 0.0020 |  |
| [CVE-2022-28693](https://patchblox.com/security/data/cve/CVE-2022-28693.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * A use-aft... | 4.7 | 0.0017 |  |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.