# ALSA-2023:2458: Security update for 47 packages ALSA-2023:2458, released May 9, 2023, fixes 40 CVEs across 47 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alsa-2023-2458 - Platform: Linux - Released: May 9, 2023 - Priority: High (Closes CVE-2022-41674, high severity) - CVEs: 40, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2023:2458 ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | almalinux 9 | 7.0.0-284.11.1.el9_2 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k](https://patchblox.com/security/data/product/linux/kernel-64k.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-core](https://patchblox.com/security/data/product/linux/kernel-64k-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-debug](https://patchblox.com/security/data/product/linux/kernel-64k-debug.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel-matched.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-extra.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-devel](https://patchblox.com/security/data/product/linux/kernel-64k-devel.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-devel-matched.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-modules](https://patchblox.com/security/data/product/linux/kernel-64k-modules.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-modules-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-modules-extra.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-zfcpdump-devel-matched](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel-matched.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-zfcpdump-modules-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-core.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | | [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | almalinux 9 | 5.14.0-284.11.1.el9_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-41674](https://patchblox.com/security/data/cve/CVE-2022-41674.md) | High | backport-iwlwifi-dkms: An issue was discovered in the Linux kernel before 5.19.16 | 8.1 | 0.0414 | | | [CVE-2022-42896](https://patchblox.com/security/data/cve/CVE-2022-42896.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... | 8.8 | 0.0246 | | | [CVE-2022-3640](https://patchblox.com/security/data/cve/CVE-2022-3640.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0121 | | | [CVE-2022-3623](https://patchblox.com/security/data/cve/CVE-2022-3623.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.5 | 0.0110 | | | [CVE-2022-42720](https://patchblox.com/security/data/cve/CVE-2022-42720.md) | High | backport-iwlwifi-dkms: Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x befor... | 7.8 | 0.0090 | | | [CVE-2022-3566](https://patchblox.com/security/data/cve/CVE-2022-3566.md) | High | linux: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161 | 7.1 | 0.0074 | | | [CVE-2023-0461](https://patchblox.com/security/data/cve/CVE-2023-0461.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0065 | | | [CVE-2022-1882](https://patchblox.com/security/data/cve/CVE-2022-1882.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0037 | | | [CVE-2022-33743](https://patchblox.com/security/data/cve/CVE-2022-33743.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0036 | | | [CVE-2022-2196](https://patchblox.com/security/data/cve/CVE-2022-2196.md) | High | linux: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry... | 8.8 | 0.0035 | | | [CVE-2022-3625](https://patchblox.com/security/data/cve/CVE-2022-3625.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0035 | | | [CVE-2022-39189](https://patchblox.com/security/data/cve/CVE-2022-39189.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0034 | | | [CVE-2022-3028](https://patchblox.com/security/data/cve/CVE-2022-3028.md) | High | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.0 | 0.0023 | | | [CVE-2023-0590](https://patchblox.com/security/data/cve/CVE-2023-0590.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0023 | | | [CVE-2022-20141](https://patchblox.com/security/data/cve/CVE-2022-20141.md) | High | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 7.0 | 0.0015 | | | [CVE-2022-3522](https://patchblox.com/security/data/cve/CVE-2022-3522.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.0 | n/a | | | [CVE-2022-3435](https://patchblox.com/security/data/cve/CVE-2022-3435.md) | Routine | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0518 | | | [CVE-2022-2663](https://patchblox.com/security/data/cve/CVE-2022-2663.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.3 | 0.0407 | | | [CVE-2022-3524](https://patchblox.com/security/data/cve/CVE-2022-3524.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0109 | | | [CVE-2023-0394](https://patchblox.com/security/data/cve/CVE-2023-0394.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 6.5 | 0.0104 | | | [CVE-2022-47929](https://patchblox.com/security/data/cve/CVE-2022-47929.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0104 | | | [CVE-2022-42703](https://patchblox.com/security/data/cve/CVE-2022-42703.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0092 | | | [CVE-2022-42721](https://patchblox.com/security/data/cve/CVE-2022-42721.md) | Routine | backport-iwlwifi-dkms: A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 cou... | 5.5 | 0.0065 | | | [CVE-2022-3628](https://patchblox.com/security/data/cve/CVE-2022-3628.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 6.8 | 0.0060 | | | [CVE-2022-42722](https://patchblox.com/security/data/cve/CVE-2022-42722.md) | Routine | backport-iwlwifi-dkms: In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 s... | 5.5 | 0.0060 | | | [CVE-2022-3619](https://patchblox.com/security/data/cve/CVE-2022-3619.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 4.3 | 0.0060 | | | [CVE-2022-28388](https://patchblox.com/security/data/cve/CVE-2022-28388.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0040 | | | [CVE-2022-43750](https://patchblox.com/security/data/cve/CVE-2022-43750.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0036 | | | [CVE-2022-1462](https://patchblox.com/security/data/cve/CVE-2022-1462.md) | Routine | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.3 | 0.0034 | | | [CVE-2022-1789](https://patchblox.com/security/data/cve/CVE-2022-1789.md) | Routine | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 6.8 | 0.0034 | | | [CVE-2021-26341](https://patchblox.com/security/data/cve/CVE-2021-26341.md) | Routine | kernel-zfcpdump-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 6.5 | 0.0032 | | | [CVE-2022-3567](https://patchblox.com/security/data/cve/CVE-2022-3567.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 6.4 | 0.0032 | | | [CVE-2021-33655](https://patchblox.com/security/data/cve/CVE-2021-33655.md) | Routine | kernel-rt-debug-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0032 | | | [CVE-2022-4128](https://patchblox.com/security/data/cve/CVE-2022-4128.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0025 | | | [CVE-2022-39188](https://patchblox.com/security/data/cve/CVE-2022-39188.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 4.7 | 0.0025 | | | [CVE-2022-3707](https://patchblox.com/security/data/cve/CVE-2022-3707.md) | Routine | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 5.5 | 0.0023 | | | [CVE-2023-1195](https://patchblox.com/security/data/cve/CVE-2023-1195.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0021 | | | [CVE-2022-21505](https://patchblox.com/security/data/cve/CVE-2022-21505.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0020 | | | [CVE-2023-1382](https://patchblox.com/security/data/cve/CVE-2023-1382.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0019 | | | [CVE-2022-4129](https://patchblox.com/security/data/cve/CVE-2022-4129.md) | Routine | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0018 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo