# ALSA-2022:1988: Security update for 20 packages

ALSA-2022:1988, released May 10, 2022, fixes 40 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alsa-2022-1988
- Platform: Linux
- Released: May 10, 2022
- Priority: High (Closes CVE-2017-5715, high severity)
- CVEs: 40, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2022:1988

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 8 | 4.18.0-372.9.1.el8 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 8 | 4.18.0-372.9.1.el8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2017-5715](https://patchblox.com/security/data/cve/CVE-2017-5715.md) | High | amd64-microcode: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized di... | n/a | 0.7325 |  |
| [CVE-2021-20322](https://patchblox.com/security/data/cve/CVE-2021-20322.md) | High | kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0690 |  |
| [CVE-2021-3773](https://patchblox.com/security/data/cve/CVE-2021-3773.md) | High | perf: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 9.8 | 0.0528 |  |
| [CVE-2021-45485](https://patchblox.com/security/data/cve/CVE-2021-45485.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0382 |  |
| [CVE-2021-4203](https://patchblox.com/security/data/cve/CVE-2021-4203.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0175 |  |
| [CVE-2021-3752](https://patchblox.com/security/data/cve/CVE-2021-3752.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0174 |  |
| [CVE-2021-4157](https://patchblox.com/security/data/cve/CVE-2021-4157.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0158 |  |
| [CVE-2021-3772](https://patchblox.com/security/data/cve/CVE-2021-3772.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0124 |  |
| [CVE-2022-1011](https://patchblox.com/security/data/cve/CVE-2022-1011.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0117 |  |
| [CVE-2018-13405](https://patchblox.com/security/data/cve/CVE-2018-13405.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | n/a | 0.0104 |  |
| [CVE-2021-29154](https://patchblox.com/security/data/cve/CVE-2021-29154.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0093 |  |
| [CVE-2021-44733](https://patchblox.com/security/data/cve/CVE-2021-44733.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0075 |  |
| [CVE-2021-3743](https://patchblox.com/security/data/cve/CVE-2021-3743.md) | High | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.2 | 0.0072 |  |
| [CVE-2021-43389](https://patchblox.com/security/data/cve/CVE-2021-43389.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0072 |  |
| [CVE-2021-43976](https://patchblox.com/security/data/cve/CVE-2021-43976.md) | High | kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0069 |  |
| [CVE-2021-3612](https://patchblox.com/security/data/cve/CVE-2021-3612.md) | High | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.2 | 0.0069 |  |
| [CVE-2020-13974](https://patchblox.com/security/data/cve/CVE-2020-13974.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0057 |  |
| [CVE-2021-4197](https://patchblox.com/security/data/cve/CVE-2021-4197.md) | High | kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.2 | 0.0054 |  |
| [CVE-2021-3744](https://patchblox.com/security/data/cve/CVE-2021-3744.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0053 |  |
| [CVE-2022-0286](https://patchblox.com/security/data/cve/CVE-2022-0286.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0053 |  |
| [CVE-2021-4002](https://patchblox.com/security/data/cve/CVE-2021-4002.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0052 |  |
| [CVE-2022-0001](https://patchblox.com/security/data/cve/CVE-2022-0001.md) | High | Intel: CVE-2022-0001 Branch History Injection | 8.2 | 0.0051 |  |
| [CVE-2020-27820](https://patchblox.com/security/data/cve/CVE-2020-27820.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0050 |  |
| [CVE-2021-21781](https://patchblox.com/security/data/cve/CVE-2021-21781.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0050 |  |
| [CVE-2021-42739](https://patchblox.com/security/data/cve/CVE-2021-42739.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0047 |  |
| [CVE-2022-0002](https://patchblox.com/security/data/cve/CVE-2022-0002.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0045 |  |
| [CVE-2021-41864](https://patchblox.com/security/data/cve/CVE-2021-41864.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0041 |  |
| [CVE-2021-45486](https://patchblox.com/security/data/cve/CVE-2021-45486.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0040 |  |
| [CVE-2020-4788](https://patchblox.com/security/data/cve/CVE-2020-4788.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0039 |  |
| [CVE-2021-37159](https://patchblox.com/security/data/cve/CVE-2021-37159.md) | High | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0039 |  |
| [CVE-2021-43056](https://patchblox.com/security/data/cve/CVE-2021-43056.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0037 |  |
| [CVE-2021-3759](https://patchblox.com/security/data/cve/CVE-2021-3759.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0036 |  |
| [CVE-2021-4037](https://patchblox.com/security/data/cve/CVE-2021-4037.md) | High | linux: A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local u... | 8.2 | 0.0034 |  |
| [CVE-2021-4083](https://patchblox.com/security/data/cve/CVE-2021-4083.md) | High | kernel-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0031 |  |
| [CVE-2022-0322](https://patchblox.com/security/data/cve/CVE-2022-0322.md) | High | kernel-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0030 |  |
| [CVE-2021-3669](https://patchblox.com/security/data/cve/CVE-2021-3669.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0030 |  |
| [CVE-2021-26401](https://patchblox.com/security/data/cve/CVE-2021-26401.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0029 |  |
| [CVE-2021-3764](https://patchblox.com/security/data/cve/CVE-2021-3764.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0027 |  |
| [CVE-2020-0404](https://patchblox.com/security/data/cve/CVE-2020-0404.md) | High | kernel-rt-modules: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.2 | 0.0023 |  |
| [CVE-2021-0941](https://patchblox.com/security/data/cve/CVE-2021-0941.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.2 | 0.0017 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
