# ELSA-2022-7683: Security update for 20 packages

ELSA-2022-7683, released November 15, 2022, fixes 25 CVEs across 20 products. One of them is being exploited (CVE-2022-2586); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/elsa-2022-7683
- Platform: Linux
- Released: Nov 15, 2022
- Priority: Patch now (Closes CVE-2022-2586, exploited (CISA KEV))
- CVEs: 25, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2022-7683.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | ol 8 | 0:4.18.0-425.3.1.el8 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | ol 8 | 0:4.18.0-425.3.1.el8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-2586](https://patchblox.com/security/data/cve/CVE-2022-2586.md) | Patch now | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.1020 | CISA KEV |
| [CVE-2022-36946](https://patchblox.com/security/data/cve/CVE-2022-36946.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0887 |  |
| [CVE-2022-2078](https://patchblox.com/security/data/cve/CVE-2022-2078.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0105 |  |
| [CVE-2022-29581](https://patchblox.com/security/data/cve/CVE-2022-29581.md) | High | kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0093 |  |
| [CVE-2022-2639](https://patchblox.com/security/data/cve/CVE-2022-2639.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0092 |  |
| [CVE-2020-36516](https://patchblox.com/security/data/cve/CVE-2020-36516.md) | High | kernel-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0067 |  |
| [CVE-2022-1055](https://patchblox.com/security/data/cve/CVE-2022-1055.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0050 |  |
| [CVE-2022-23960](https://patchblox.com/security/data/cve/CVE-2022-23960.md) | High | Arm: CVE-2022-23960 Cache Speculation Restriction Vulnerability | 7.8 | 0.0050 | Disclosed |
| [CVE-2022-0617](https://patchblox.com/security/data/cve/CVE-2022-0617.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0050 |  |
| [CVE-2022-0854](https://patchblox.com/security/data/cve/CVE-2022-0854.md) | High | kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0046 |  |
| [CVE-2022-1016](https://patchblox.com/security/data/cve/CVE-2022-1016.md) | High | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0044 |  |
| [CVE-2022-28893](https://patchblox.com/security/data/cve/CVE-2022-28893.md) | High | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0041 |  |
| [CVE-2022-24448](https://patchblox.com/security/data/cve/CVE-2022-24448.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0040 |  |
| [CVE-2022-27950](https://patchblox.com/security/data/cve/CVE-2022-27950.md) | High | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0038 |  |
| [CVE-2021-3640](https://patchblox.com/security/data/cve/CVE-2021-3640.md) | High | kernel-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0037 |  |
| [CVE-2021-30002](https://patchblox.com/security/data/cve/CVE-2021-30002.md) | High | kernel-rt-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0037 |  |
| [CVE-2022-26373](https://patchblox.com/security/data/cve/CVE-2022-26373.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0037 |  |
| [CVE-2022-28390](https://patchblox.com/security/data/cve/CVE-2022-28390.md) | High | kernel-zfcpdump-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0036 |  |
| [CVE-2022-1852](https://patchblox.com/security/data/cve/CVE-2022-1852.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0033 |  |
| [CVE-2020-36558](https://patchblox.com/security/data/cve/CVE-2020-36558.md) | High | kernel-rt-debug-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0031 |  |
| [CVE-2022-1184](https://patchblox.com/security/data/cve/CVE-2022-1184.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0029 |  |
| [CVE-2022-2938](https://patchblox.com/security/data/cve/CVE-2022-2938.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0028 |  |
| [CVE-2022-0168](https://patchblox.com/security/data/cve/CVE-2022-0168.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0027 |  |
| [CVE-2022-1048](https://patchblox.com/security/data/cve/CVE-2022-1048.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0024 |  |
| [CVE-2022-20368](https://patchblox.com/security/data/cve/CVE-2022-20368.md) | High | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * off-path... | 7.8 | 0.0013 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo