# ELSA-2023-6583: Security update for 27 packages ELSA-2023-6583, released November 12, 2023, fixes 41 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2023-6583 - Platform: Linux - Released: Nov 12, 2023 - Priority: High (Closes CVE-2023-4206, high severity) - CVEs: 41, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2023-6583.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 9 | 0:7.2.0-362.8.1.el9_3 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | | [rv](https://patchblox.com/security/data/product/linux/rv.md) | ol 9 | 0:5.14.0-362.8.1.el9_3 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-4206](https://patchblox.com/security/data/cve/CVE-2023-4206.md) | High | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local... | 7.8 | 0.0059 | | | [CVE-2023-39191](https://patchblox.com/security/data/cve/CVE-2023-39191.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.2 | 0.0053 | | | [CVE-2023-3268](https://patchblox.com/security/data/cve/CVE-2023-3268.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.1 | 0.0052 | | | [CVE-2023-3609](https://patchblox.com/security/data/cve/CVE-2023-3609.md) | High | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local p... | 7.8 | 0.0049 | | | [CVE-2023-1989](https://patchblox.com/security/data/cve/CVE-2023-1989.md) | High | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0044 | | | [CVE-2023-3141](https://patchblox.com/security/data/cve/CVE-2023-3141.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.1 | 0.0043 | | | [CVE-2022-3565](https://patchblox.com/security/data/cve/CVE-2022-3565.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0035 | | | [CVE-2023-4207](https://patchblox.com/security/data/cve/CVE-2023-4207.md) | High | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local pr... | 7.8 | 0.0031 | | | [CVE-2023-4208](https://patchblox.com/security/data/cve/CVE-2023-4208.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0031 | | | [CVE-2023-0597](https://patchblox.com/security/data/cve/CVE-2023-0597.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0030 | | | [CVE-2023-1652](https://patchblox.com/security/data/cve/CVE-2023-1652.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0025 | | | [CVE-2023-1252](https://patchblox.com/security/data/cve/CVE-2023-1252.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0022 | | | [CVE-2023-4128](https://patchblox.com/security/data/cve/CVE-2023-4128.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | n/a | | | [CVE-2022-3594](https://patchblox.com/security/data/cve/CVE-2022-3594.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.3 | 0.0315 | | | [CVE-2022-40982](https://patchblox.com/security/data/cve/CVE-2022-40982.md) | Routine | intel-microcode: Information exposure through microarchitectural state after transient execution in certain vector execution units for... | 6.5 | 0.0305 | | | [CVE-2022-3523](https://patchblox.com/security/data/cve/CVE-2022-3523.md) | Routine | kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.3 | 0.0114 | | | [CVE-2023-4273](https://patchblox.com/security/data/cve/CVE-2023-4273.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 6.7 | 0.0065 | | | [CVE-2022-40133](https://patchblox.com/security/data/cve/CVE-2022-40133.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0063 | | | [CVE-2023-1206](https://patchblox.com/security/data/cve/CVE-2023-1206.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.7 | 0.0063 | | | [CVE-2022-38457](https://patchblox.com/security/data/cve/CVE-2022-38457.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0058 | | | [CVE-2022-42895](https://patchblox.com/security/data/cve/CVE-2022-42895.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.5 | 0.0048 | | | [CVE-2023-3772](https://patchblox.com/security/data/cve/CVE-2023-3772.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0048 | | | [CVE-2023-30456](https://patchblox.com/security/data/cve/CVE-2023-30456.md) | Routine | linux: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8 | 6.5 | 0.0047 | | | [CVE-2023-33952](https://patchblox.com/security/data/cve/CVE-2023-33952.md) | Routine | linux: A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel | 6.7 | 0.0047 | | | [CVE-2023-1079](https://patchblox.com/security/data/cve/CVE-2023-1079.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.8 | 0.0045 | | | [CVE-2023-1073](https://patchblox.com/security/data/cve/CVE-2023-1073.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.6 | 0.0039 | | | [CVE-2023-33203](https://patchblox.com/security/data/cve/CVE-2023-33203.md) | Routine | linux: The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac... | 6.4 | 0.0035 | | | [CVE-2023-33951](https://patchblox.com/security/data/cve/CVE-2023-33951.md) | Routine | linux: A race condition vulnerability was found in the vmwgfx driver in the Linux kernel | 6.7 | 0.0034 | | | [CVE-2023-26545](https://patchblox.com/security/data/cve/CVE-2023-26545.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 4.7 | 0.0033 | | | [CVE-2023-1249](https://patchblox.com/security/data/cve/CVE-2023-1249.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0033 | | | [CVE-2023-3212](https://patchblox.com/security/data/cve/CVE-2023-3212.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 4.4 | 0.0028 | | | [CVE-2023-4194](https://patchblox.com/security/data/cve/CVE-2023-4194.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0027 | | | [CVE-2023-1076](https://patchblox.com/security/data/cve/CVE-2023-1076.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0025 | | | [CVE-2023-3773](https://patchblox.com/security/data/cve/CVE-2023-3773.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 5.5 | 0.0025 | | | [CVE-2023-1074](https://patchblox.com/security/data/cve/CVE-2023-1074.md) | Routine | kernel-rt-modules: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0024 | | | [CVE-2023-1855](https://patchblox.com/security/data/cve/CVE-2023-1855.md) | Routine | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.4 | 0.0023 | | | [CVE-2023-1075](https://patchblox.com/security/data/cve/CVE-2023-1075.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 3.3 | 0.0022 | | | [CVE-2023-3161](https://patchblox.com/security/data/cve/CVE-2023-3161.md) | Routine | linux: A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2023-3358](https://patchblox.com/security/data/cve/CVE-2023-3358.md) | Routine | linux: A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver | 5.5 | 0.0020 | | | [CVE-2023-4155](https://patchblox.com/security/data/cve/CVE-2023-4155.md) | Routine | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.6 | 0.0017 | | | [CVE-2023-35825](https://patchblox.com/security/data/cve/CVE-2023-35825.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.4 | n/a | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo